Google has released a Chrome 150 security update that resolves 27 vulnerabilities, including two critical-severity flaws. The two critical bugs are use-after-free issues in Chrome’s Ozone and Views components, both of which were found by Google last month.
Vulnerability Breakdown
The Chrome refresh resolves a total of 13 use-after-free defects, including 10 high-severity and one medium-severity weakness. Other types of vulnerabilities patched in this update include uninitialized use, integer overflow, out-of-bounds read and write, insufficient validation of untrusted input, inappropriate implementation, insufficient data validation, and insufficient policy enforcement.
Discovery and Bug Bounty Rewards
Most of these flaws were discovered by Google, a trend that has been ongoing for over two months. According to Google’s advisory, only three of the newly resolved security defects were reported by external researchers, who received a total of $3,000 in bug bounty rewards. This trend, likely driven by the use of AI, has led to lower bug bounty rewards but resulted in far more security weaknesses being addressed.
Since April, Google has rolled out fixes for more than 1,400 Chrome vulnerabilities, including hundreds of memory safety bugs. Chrome updates released in June and July resolved over 1,000 flaws. The latest Chrome iteration is now available for download as versions 150.0.7871.114/.115 for Windows and macOS, and as version 150.0.7871.114 for Linux.
Related Updates and Security Concerns
This update is part of Google's ongoing efforts to improve the security of its Chrome browser. Related updates include the resolution of 382 Chrome vulnerabilities and the patching of 18 severe vulnerabilities in the Chrome 149 update. Additionally, there have been reports of unpatched backdoors in Tenda firmware and exploited ColdFusion, Langflow, and Joomla flaws, highlighting the importance of keeping software up to date.
For users, it is essential to download and install the latest version of Chrome to ensure they have the latest security patches. This can be done by checking for updates in the Chrome browser settings. By staying informed about the latest security updates and taking proactive steps to protect their devices, users can help minimize the risk of security breaches and stay safe online.
Google's commitment to addressing security vulnerabilities is crucial in today's digital landscape, where cybersecurity threats are increasingly sophisticated and widespread.
As the cybersecurity landscape continues to evolve, it is vital for individuals and organizations to remain vigilant and take a proactive approach to security. By doing so, they can help protect themselves and their data from potential threats and stay ahead of emerging security risks.
Conclusion
In conclusion, the Chrome 150 update is a significant step forward in enhancing the security of the Chrome browser. With its resolution of 27 vulnerabilities, including two critical-severity flaws, this update underscores the importance of regular security updates and the need for users to stay informed about the latest security patches.
By prioritizing security and taking proactive steps to protect their devices, users can help minimize the risk of security breaches and stay safe online. As the cybersecurity landscape continues to evolve, it is essential for individuals and organizations to remain vigilant and adapt to emerging security risks.
Source: SecurityWeek