Skip to content

Image: malwarebytes.com · rights & removal

Executive Summary

Google released several Chrome updates recently, including a Stable Channel Update for desktop on September 22, which involved version 154.0.8037.57 across Linux and specialized versions for Windows and Mac. This update included 108 security fixes, including 11 critical ones. Additionally, Chrome version 155 was released for Android to a small percentage of users as an Early Stable rollout, focusing on stability and performance improvements. A Beta channel version of Chrome 155 is also available for testing upcoming features, offering pre-release functionality. Updates can be applied automatically or manually by checking settings or clicking Relaunch in the About Google Chrome menu. Several desktop security fixes were noted, including flaws in ANGLE related to buffer overflows (CVE-2026-95350 and CVE-2026-95281) and an out-of-bounds write in the GPU component (CVE-2026-95357). Users are also advised to use tools like Malwarebytes Browser Guard to block malicious sites.

Facts Only

* Google released a Stable Channel Update for Desktop on September 22.
* The desktop update brought Chrome to version 154.0.8037.57 for Linux and versions 154.0.8037.57/.58 for Windows and Mac.
* The update included 108 security fixes, including 11 rated Critical fixes.
* Chrome version 155.0.8059.16 was released for Android to a small percentage of users.
* Chrome 155 is also available in the Beta channel.
* The Android release is an Early Stable rollout, distributed to a small user share to test compatibility and reliability.
* Beta channel users access features roughly four to six weeks before Stable release.
* Security fixes include CVE-2026-95350 (buffer overflow in ANGLE), CVE-2026-95281 (Critical buffer overflow in ANGLE), and CVE-2026-95357 (out-of-bounds write in Chrome’s GPU component).
* Users can update manually by opening About Google Chrome settings or clicking Relaunch after checking for updates.

Full Take

The sequence of updates highlights a simultaneous push for security remediation and feature rollout across different platforms, managed through tiered release channels (Stable, Early Stable, Beta). This structure reflects a deliberate pacing mechanism designed to manage risk while simultaneously encouraging user engagement with new features. The focus on specific, technical vulnerabilities like buffer overflows in graphics layers suggests that the underlying infrastructure maintenance is a primary driver for these updates, positioning security patching as an intrinsic necessity rather than an optional feature. The presence of low-level exploits noted—such as memory safety bugs leading to potential code execution in ANGLE—demonstrates that the security posture is tied directly to complex, low-level software components. Furthermore, the method of updating, which can be bypassed if users ignore automatic updates, introduces a friction point where agency must be asserted over convenience. The simultaneous existence of highly polished Beta testing and broader Stable releases creates an implicit gradient of risk for the user base. When organizations focus on layering complex updates with specific vulnerability details, it signals a tension between system stability (the need to fix known flaws) and perceived dynamism (the desire to adopt new features), forcing the user into a position where knowledge about versioning and security is necessary for maintaining effective control over their digital environment.
Bridge Questions: How does the staggered rollout of updates affect the perception of systemic risk among general users? What are the inherent trade-offs between the speed of feature deployment in Beta channels and the assurance provided by Stable releases? If users prioritize security fixes over new features, what structural changes would be necessary to decouple these two development streams?

From the original · Malwarebytes Labs

Over the last few days, Google issued several different Chrome updates. On September 22, Google released a Stable Channel Update for Desktop.
Read the full story at malwarebytes.com

Sentinel — Human

Confidence

The text exhibits the hallmarks of human-written technical blogging, including conversational transitions and a specific marketing objective.

Signals Detected
low severity: Erratic sentence length and natural conversational shifts (e.g., 'keep an eye out for it')
low severity: Presence of instructional digressions and specific product placement
Human Indicators
Idiosyncratic phrasing like 'essentially, the attacker writes garbage data'
Non-uniform paragraph structure
Specific, non-generic instructional advice
Update Chrome: 108 security fixes for desktop, new release for Android | Huntaegis