Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

Google released Chrome 154.0.8037.97/.98 containing 11 security fixes — notably a critical WebGL out-of-bounds write (CVE-2026-103628, CVSSv3 9.6) that can allow arbitrary code execution outside the sandbox via a crafted web page; the update fixes multiple high-severity memory issues and other flaws across components. Google found six of the bugs while external researchers reported the rest; no active exploitation or public PoC has been confirmed, and users should update Chrome on Windows, Mac, and Linux immediately.