Google has rolled out Chrome version 154, introducing patches for 108 security vulnerabilities, 11 of which are classified as critical threats. Users are advised to update their browsers promptly to benefit from these crucial security enhancements.
Addressing Critical Vulnerabilities
The update tackles several critical security issues, including buffer overflow vulnerabilities in ANGLE and WebGL, as well as out-of-bounds writes in the GPU and WebGL. Additional critical bugs involve use-after-free errors within ServiceWorker, Fullscreen, WindowDialog, and AdFilter components.
A significant portion of these critical flaws, nine in total, were identified by external researchers. In all, 32 vulnerabilities reported by outside experts have been rectified, with the remaining flaws discovered internally by Google.
Bug Bounty and High-Severity Issues
Google has acknowledged the contributions of external researchers by awarding $18,000 in bug bounties. This figure is preliminary, as further assessments are still pending to finalize the compensation for the remaining externally reported issues.
Among the 108 patched vulnerabilities, 25 are categorized as high-severity. These include a dozen use-after-free defects and several instances of type confusion, uninitialized resource errors, and buffer overflow problems. Additional high-severity issues include missing authorization and UI misinterpretation bugs.
Medium and Low-Severity Vulnerabilities
The update also resolves medium- and low-severity weaknesses related to authorization, input validation, UI misrepresentation, memory corruption, information leaks, and memory safety concerns. While Google has not reported any active exploitation of these vulnerabilities in the wild, the update is crucial for maintaining browser security.
The latest Chrome version is now available as 154.0.8037.57/.58 for Windows and macOS, and 154.0.8037.57 for Linux users. As always, users are encouraged to install updates immediately to shield themselves from potential threats.
Staying informed and proactive about software updates is key to maintaining cybersecurity. With this latest release, Google continues to demonstrate its commitment to user safety by swiftly addressing vulnerabilities.
