Critical Chrome Security Vulnerabilities Fixed

Google has released a Chrome update addressing critical vulnerabilities, safeguarding millions of users. The latest Stable version, 130.0.6723.91/.92, is now rolling out for Windows, Mac, and Linux, with Extended Stable version 130.0.6723.92 available for Windows and Mac.

Fixed Vulnerabilities

The update includes two critical security fixes, emphasizing Google’s commitment to a secure browsing experience. These fixes, contributed by external researchers, showcase collaborative efforts in cybersecurity.

CVE-2024-10487: Critical Out-of-Bounds Write in Dawn
Allows arbitrary code execution via a graphics layer in Chrome, requiring urgent patching.

CVE-2024-10488: High-Severity Use-After-Free in WebRTC
Affects real-time communication in browsers, potentially enabling attackers to control systems.

Google is committed to user safety by keeping bug details and links private until the majority of users have received the latest updates. This approach minimizes the chance that attackers can exploit the vulnerabilities before users are protected.

In addition to Chrome’s security, Google closely monitors vulnerabilities in third-party libraries used by Chrome and other software projects, which might otherwise go unpatched.

By controlling information about these bugs and actively addressing external vulnerabilities, Google aims to safeguard both Chrome users and the broader software ecosystem.

Google values the contributions of security researchers who work together with them to catch security bugs before they reach the stable version of Chrome, strengthening its security.

Google also offers resources and forums to support users interested in exploring different release channels or reporting issues.

Users are encouraged to report any new bugs they find and to use the community help forum for guidance on common problems.