Chrome users told to restart browsers now over 108 security fixes
Chrome users told to restart browsers now over 108 fixes

All Chrome users are being urged to check their browser settings and restart as soon as possible, following the release of a major security update from Google. The latest version, Chrome 154.0.8037.57/.58 for Windows and Mac, addresses a total of 108 security issues, with 11 of them rated as critical.

Critical vulnerabilities addressed

According to the cybersecurity team at Malwarebytes, Google released a Stable Channel Update for Desktop on September 22. They described it as "the most important one for desktop users," noting that it includes 108 security fixes, including 11 rated Critical.

Although there is no evidence that these bugs have been exploited in an actual attack yet, users should not ignore the alert. The issues could lead to Chrome crashes, potential remote code execution, and browser compromise in the future.

Android users also receive update

Alongside the desktop update, Google has also rolled out Chrome 155 for Android, version 155.0.8059.16. This version has reportedly been released to a small percentage of users, so it may not be available to everyone immediately.

Android device owners are advised to keep an eye out for the update, as Google says it includes stability and performance improvements.

How to update Chrome on your computer

To update Chrome, open the browser on your computer and click the three vertical dots in the top-right corner. Then select Help and click About Google Chrome. Chrome will check for updates and install them automatically. Finally, click Relaunch to restart the browser and complete the update. The process typically takes less than a minute.

This latest update follows another important Chrome change released just weeks ago, which fixed a "zero-day" bug. That issue, identified as CVE-2026-85046, could be triggered by visiting a fake website, allowing attackers to take control via remote code execution (RCE). RCE is a serious security flaw that lets attackers run malicious commands or software on another computer remotely, potentially stealing data, installing malware, or taking complete control of the affected device.