Google has released Chrome 157, introducing a series of security improvements. This latest version addresses a total of 213 vulnerabilities, with seven identified as critical memory safety issues, enhancing user protection across platforms.
Critical Security Vulnerabilities Addressed
Among the most severe issues resolved in Chrome 157 is a buffer overflow in Dawn, the open-source WebGPU standard implementation. This flaw earned the reporting researcher a $10,000 reward. Another critical fix involved memory corruption in ANGLE, a graphics engine abstraction layer, with a $1,000 bug bounty awarded.
The update also covers five other critical vulnerabilities, including four use-after-free defects and another buffer overflow. These were reported by various researchers, including Google’s own team, Anthropic’s Xinyang Ge, and Wenbin Liu. However, specific rewards for these issues were not disclosed.
High-Severity Vulnerabilities and Researcher Contributions
Alongside critical fixes, Chrome 157 addresses 77 high-severity vulnerabilities. External researchers reported over a dozen of these flaws. Notably, Google disclosed $10,000 for an incorrect authorization flaw and $2,000 for an out-of-bounds read issue.
In total, Google awarded $31,000 to researchers for their contributions, though the bounties for 39 vulnerabilities remain undetermined. These updates tackle common vulnerability types such as incorrect authorization, use-after-free, UI misrepresentation, and type confusion.
User Update Recommendations
Chrome 157 is now being deployed as versions 157.0.8103.38/.39 for Windows and macOS, and 157.0.8103.38 for Linux. While Google has not reported any in-the-wild exploits of these vulnerabilities, it strongly recommends users update their browsers promptly to ensure security.
As security continues to be a critical focus, users are advised to frequently check for updates to maintain the integrity of their browsing experience. Stay informed about future patches and updates to safeguard against potential threats.
