Google Chrome 154.0.8037.151 (ChromeOS Stable, OS 16805.33.0)

What this release contains

This Stable-channel update moves ChromeOS to OS version 16805.33.0 and updates the browser to 154.0.8037.151 for most devices. The release notes call out high-severity third-party security fixes, including a mali_kbase use-after-free write in delete_hoarded_chunks that can allow GPU-process to kernel memory corruption, and a potential StartArcVm unvalidated wayland_server field that can lead to crosvm sandbox weakening. The notes also reference Android security fixes and list "Reported Bug Fixes: N/A."

Why it matters for your stack

The named fixes are high severity because they can affect process isolation and kernel memory integrity: a GPU-related use-after-free can permit corruption at a privileged layer, and issues that weaken the crosvm sandbox can increase the attack surface for virtualized components. For managed fleets and users handling sensitive data, applying these fixes reduces the risk of privilege escalation or kernel-impacting exploits.

How to update

ChromeOS devices on the Stable channel typically receive updates automatically. To ensure a device is up to date, open Settings > About Chrome OS and allow the device to check for and apply updates; a restart may be required to complete installation. If you run a managed fleet, verify roll-out status in your management console and follow your standard testing and deployment process before broad rollout.