Chrome 145 update fixes several critical browser vulnerabilities

Instead of the expected new major version Chrome 146, Google just released another update for Chrome 145 (presumably this version’s final security update). In the new Chrome versions 145.0.7632.159/160 for Windows and macOS and 145.0.7632.159 for Linux, the developers have fixed 10 security vulnerabilities. According to Google, none of the fixed vulnerabilities have been exploited for attacks in the wild.

In Chrome Releases blog post, Srinivas Sista lists the 10 security vulnerabilities that have been fixed. Nine of them were reported by external security researchers. Three of them are classified as critical, while the rest are classified as high risk.

The three critical vulnerabilities are all found in graphics libraries: CVE-2026-3536 in Angle, CVE-2026-3538 in Skia, and CVE-2026-3537 in PowerVR (for the GPUs of the same name from the manufacturer Imagination Technologies).

As for the “high risk” vulnerabilities, several of them are described as “inappropriate implementation” whether in CSS or in the V8 JavaScript engine. However, it remains unclear what was “inappropriately” implemented and why it’s a problem.

Chrome for Android 145.0.7632.159 and Chrome for iOS 146.0.7680.38 are also available. The Android version addresses the same vulnerabilities as the desktop versions. The Extended Stable Channel for Windows and macOS now includes Chromium version 144.0.7559.236.

Chrome usually updates automatically when a new version is available. You can manually trigger the update check via the menu item Help > About Google Chrome.

Tip: Even if your browser is up-to-date, you should also protect your PC further with reputable antivirus software. See our vetted picks for the best PC antivirus software to get started, as well as our best VPN picks if you value privacy while using the internet.

What about Chrome 146?

Last week, Google rolled out Chrome 146 to around 0.5 percent of users as a kind of release candidate (Google calls it an “early stable release”). That should’ve been followed by a release for everyone this week. Chrome 146 has already been released for iOS at least.

Google’s “AI” Gemini claims that Google has “shortened the cycle for new Chrome versions to two weeks since 2026”, which, according to the current roadmap, is not true for at least the first half of 2026. It’s only from August onwards that the time between two new major Chrome versions (in this case 152 and 153) will shrink to two weeks. This means that Chrome will reach version 160 by Christmas.