CHROME-2026-03-03

 The Stable channel has been updated to 145.0.7632.159/160 for Windows/Mac  and 145.0.7632.159 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the LogSecurity Fixes and RewardsNote: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.This update includes 10 security fixes. Please see the Chrome Security Page for more information.[$33,000] Critical CVE-2026-3536: Integer overflow in ANGLE. Reported by cinzinga on 2026-02-18[$32,000] Critical CVE-2026-3537: Object lifecycle issue in PowerVR. Reported by Zhihua Yao of KunLun Lab on 2026-01-08 Critical CVE-2026-3538: Integer overflow in Skia. Reported by Symeon Paraschoudis on 2026-02-17 High CVE-2026-3539: Object lifecycle issue in DevTools. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-02-12 High CVE-2026-3540: Inappropriate implementation in WebAudio. Reported by Davi Antônio Cruz on 2026-02-14 High CVE-2026-3541: Inappropriate implementation in CSS. Reported by Syn4pse on 2026-02-16 High CVE-2026-3542: Inappropriate implementation in WebAssembly. Reported by qymag1c on 2026-02-17 High CVE-2026-3543: Inappropriate implementation in V8. Reported by qymag1c on 2026-02-18 High CVE-2026-3544: Heap buffer overflow in WebCodecs. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-19 High CVE-2026-3545: Insufficient data validation in Navigation. Reported by Google on 2026-02-24We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.Interested in switching release channels? Find out how here. If you find a...