Google Updates Chrome 150 Patch Count to 433 Vulnerabilities
Summary
Google revised Chrome 150’s patch count from 382 to 433 vulnerabilities. The initial report listed 15 critical and 67 high-severity flaws; Google’s advisory did not report in-the-wild exploitation of the flaws.
Key points
- Google updated its advisory to say Chrome 150 patches 433 vulnerabilities, revising the initial count of 382.
- The initial breakdown listed 15 critical, 67 high-, 169 medium- and 131 low-severity vulnerabilities.
- Reported flaw types include use-after-free, out-of-bounds, type confusion and insufficient input validation.
- Many flaws affect Chrome’s renderer and may be triggered by crafted web content; some could enable code execution in the renderer sandbox or, after renderer compromise, a sandbox escape.
- Google’s advisory did not mention in-the-wild exploitation of the vulnerabilities.
- Google discovered 358 of the initially reported 382 flaws; the article says the recent rise in discoveries may be driven by AI, but identifies no specific tools.
Article Details
- Event Type
- Google released Chrome 150 security updates, initially reported to patch 382 vulnerabilities and later updated to 433.
- Impact
- The flaws include user-after-free, out-of-bounds, incorrect security UI, uninitialized use, type confusion, and insufficient input validation issues. Some could enable remote code execution in the renderer sandbox, and in some cases a renderer compromise could be followed by a sandbox escape and system-level code execution. Google’s advisory did not report in-the-wild exploitation of these flaws. The article’s severity counts—15 critical, 67 high, 169 medium, and 131 low—were given before the update to the total vulnerability count.