Chrome 157 Fixes 213 Vulnerabilities, Including Seven Critical Flaws
Summary
Chrome 157 fixes 213 vulnerabilities, including seven critical and 77 high-severity flaws. Google reported no known in-the-wild exploitation and is rolling out the update for Windows, macOS and Linux.
Key points
- Chrome 157 addresses 213 vulnerabilities, including seven critical and 77 high-severity flaws.
- The critical issues include four use-after-free defects, two memory-safety flaws in Dawn and ANGLE, and a buffer overflow.
- Google reported no known exploitation of the vulnerabilities in the wild and recommends updating promptly.
- The update is rolling out as versions 157.0.8103.38/.39 for Windows and macOS, and 157.0.8103.38 for Linux.
- Google said it awarded $31,000 in researcher rewards, with bounties still undetermined for 39 flaws.
Article Details
- Vulnerability Types
- Buffer overflow
- Memory corruption
- Use-after-free
- Incorrect authorization
- Out-of-bounds read
- Severity
- Seven vulnerabilities are rated critical and 77 are rated high severity.
- Exploitation Status
- not_reported
- Exploit Availability
- unknown
- Patch Status
- available