Google Chrome 154.0.8037.58 Patches 108 Security Flaws, 11 of Them Critical
It isn't a feature-heavy release, but it's one of the largest security updates of the year.
Google has released Chrome 154.0.8037.57/.58 for Windows, the first stable build of Chrome 154. It isn't a feature-heavy release, but it's one of the largest security updates of the year: 108 security fixes, including 11 vulnerabilities rated Critical. Chrome is on a two-week release cycle now, so fixes reach users faster than before, as long as you let the browser restart and apply them.
What's New
- 108 security fixes: One of the largest batches of fixes in a single Chrome release this year.
- 11 Critical vulnerabilities fixed, including:
- Buffer overflows in ANGLE, Chrome's graphics translation layer, and in WebGL
- Out-of-bounds writes in the GPU process and WebGL
- Use-after-free bugs in ServiceWorker, Fullscreen, WindowDialog and the built-in ad filter
- Many High-severity fixes in V8 (Chrome's JavaScript engine), PDFium (the built-in PDF viewer), WebAudio, IndexedDB, Bluetooth, HID and the browser interface.
- Security indicator fixes: Several "UI misrepresentation" bugs are fixed. These could have let a site make the address bar or security indicators show something misleading.
- Stability and performance: General fixes and improvements across the browser.
Should You Update?
Yes, and soon. Critical bugs in the graphics stack and in the JavaScript engine are the kind attackers target first. To check your version and start the update, open Settings → About Chrome, then click Relaunch when the update finishes.
Download
Get Google Chrome 154.0.8037.58 for Windows from Google Chrome on UpdateStar.
For version history and update tracking, see Google Chrome on UpdateStar.
about author
