Google patches 52 Chrome vulnerabilities, four rated critical
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Product
- Chrome
- First seen
Summary
Google released a Chrome security update, version 156.0.8078.73/.74, fixing 52 vulnerabilities, including four rated critical. The flaws include use-after-free and memory corruption issues in V8, Skia, and FileSystem, as described in the item's source post.
If you use Google
Update Google Chrome to 156.0.8078.73/.74 on Windows and Mac, or 156.0.8078.73 on Linux
Update Microsoft Edge, Brave, Opera, Vivaldi, and other Chromium-based browsers as patches become available
Restart the browser after updating to apply the fix
Install the latest Android security update from your device maker
Check Google's Android Security Bulletin for a patch covering this issue
Monitor the original researcher or Google for technical details and confirmation
What the sources say 3
· Mastodon: “Google released a security update for Chrome version 156.0.8078.73/.74 to fix 52 vulnerabilities, including four critical flaws.” Source
· Mastodon: “A new zero-click denial-of-service vulnerability known as the Android SMS of Death crashes calling features via malicious WAP Push messages.” Source
· Mastodon: “Improper access control in ComputePressure in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page.” Source