Annanim News
Now
Quantum & precision measurementChina's Jiuzhang 4.0 photonic quantum computer wins a World Internet Conference awardDefense techIWI's counter-drone system enters service in Thailand, with four more Asian countries in procurementCybersecurityESET: China-aligned hackers hijacked Sogou keyboard requests to install a backdoorCybersecuritySonicWall: two GMS flaws will not be fixed because the product is no longer supportedRegulation & businessUS midterms: measures to restrict data centers win almost everywhereAutonomous vehiclesKorea: consumer group accuses Tesla of selling FSD to owners who can't use itCybersecurityChrome 157 fixes 213 vulnerabilities, seven of them criticalCybersecurityIsrael's Sentra raises $150 million for data securityChips & hardwareReport: Nvidia will supply only about 1% of China's RTX Pro 5500 ordersCybersecurityCritical Rails flaw: a crafted upload lets attackers write files to the serverChips & hardwareAMD expects quarterly revenue above Intel's for the first time in its historyCybersecurityTwo Xen flaws let a malicious virtual machine read and write other machines' memoryQuantum & precision measurementBreaking one symmetry is enough for full quantum control of an atom chainChips & hardwareWingtech rejects Nexperia restructuring plan, alleging discriminationDefense techCell antennas as radar: NATO, China and Ericsson test drone detection on 5G networksRoboticsMeta built a humanoid robot with China's Fourier in about three months

Menu
1 min read

Originally published:

Chrome 157 fixes 213 vulnerabilities, seven of them critical

Google has promoted Chrome 157 to the stable channel with fixes for 213 vulnerabilities, including seven critical memory safety bugs and 77 high-severity ones. Google reports no exploitation but recommends updating.

Chrome 157 fixes 213 vulnerabilities, seven of them critical
Image: SecurityWeek

Google has released Chrome 157 to the stable channel with fixes for 213 vulnerabilities. Seven are rated critical, all memory safety bugs, including a buffer overflow in Dawn, the WebGPU implementation, and memory corruption in the ANGLE graphics engine. Two of the critical bugs were reported by a researcher at Anthropic. The release also fixes 77 high-severity vulnerabilities.

The most common types in the update are incorrect or missing authorization (51), use-after-free (45) and UI misrepresentation (19). Google has paid $31,000 to researchers so far and has not yet set the rewards for 39 of the flaws.

What to do: Google makes no mention of any of the flaws being exploited, but users should update the browser soon. The versions are 157.0.8103.38/.39 for Windows and macOS and 157.0.8103.38 for Linux.

Sources

SecurityWeek Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical Chrome 157 patches 213 vulnerabilities, including critical memory safety bugs and high-severity authorization issues. securityweek.com

Topics

Read in Hebrew: גרסה בעברית

Install the app

In Safari: tap the Share button, then “Add to Home Screen”.