Chrome 157 Patches 213 Vulnerabilities, Seven Critical Memory Safety Flaws
Google released Chrome 157 to the stable channel, fixing 213 vulnerabilities including seven critical memory safety bugs. The most severe issues involve a buffer overflow in Dawn (the WebGPU implementation) and a memory corruption flaw in ANGLE, alongside four use-after-free defects and another buffer overflow. Google paid out $31,000 in bug bounty rewards so far, with payouts for 39 flaws still undetermined. No in-the-wild exploitation has been observed for any of the patched issues, but users are urged to update promptly given the volume and severity of fixes.
Detalhes técnicos
The update addresses 77 high-severity vulnerabilities in addition to the seven critical ones. Common bug classes include incorrect/missing authorization (51), use-after-free (45), UI misrepresentation (19), type confusion (13), information leak (13), out-of-bounds read/write (11), improper input validation (9), and uninitialized resource (9). Reporters credited include Anthropic's Xinyang Ge and researcher Wenbin Liu, among others; Google itself discovered several of the critical flaws.
Remediação
Chrome 157 is rolling out as versions 157.0.8103.38/.39 for Windows and macOS, and 157.0.8103.38 for Linux. Users should update their browsers as soon as the new version becomes available.
Linha do tempo
-
Chrome 157 Patches 213 Vulnerabilities, Seven Critical Memory Safety Flaws
ler a análise desta fonte ocultar
Google released Chrome 157 to the stable channel, fixing 213 vulnerabilities including seven critical memory safety bugs. The most severe issues involve a buffer overflow in Dawn (the WebGPU implementation) and a memory corruption flaw in ANGLE, alongside four use-after-free defects and another buffer overflow. Google paid out $31,000 in bug bounty rewards so far, with payouts for 39 flaws still undetermined. No in-the-wild exploitation has been observed for any of the patched issues, but users are urged to update promptly given the volume and severity of fixes.
Technical Details
The update addresses 77 high-severity vulnerabilities in addition to the seven critical ones. Common bug classes include incorrect/missing authorization (51), use-after-free (45), UI misrepresentation (19), type confusion (13), information leak (13), out-of-bounds read/write (11), improper input validation (9), and uninitialized resource (9). Reporters credited include Anthropic's Xinyang Ge and researcher Wenbin Liu, among others; Google itself discovered several of the critical flaws.
Remediation
Chrome 157 is rolling out as versions 157.0.8103.38/.39 for Windows and macOS, and 157.0.8103.38 for Linux. Users should update their browsers as soon as the new version becomes available.