Google has rolled out a new Stable Channel Update for its Chrome browser, addressing critical security vulnerabilities that posed significant risks to users.
The update, version 132.0.6834.110/111 for Windows and Mac and 132.0.6834.110 for Linux is being gradually deployed and is expected to reach all users in the coming weeks.
The update includes significant security fixes, two of which are rated as “High” severity. The vulnerabilities were identified in Chrome’s V8 JavaScript engine, a core component responsible for executing JavaScript code.
This vulnerability involves object corruption in the V8 engine, potentially allowing attackers to execute arbitrary code. Exploiting this flaw could lead to heap corruption, enabling attackers to gain unauthorized control over the affected system. Security researcher “303f06e3” reported the issue and received a $11,000 reward.
Are you from SOC/DFIR Teams? - Analyse Malware Files & Links with ANY.RUN Sandox -> Try for Free
This issue arises from accessing memory locations outside the intended boundaries within the V8 engine. It could result in crashes or allow attackers to execute malicious code remotely. Alan Goodman reported this issue, and a $8,000 bounty was awarded.
The vulnerabilities patched in this release highlight the risks posed by memory-related issues in modern software. Exploiting these flaws could enable attackers to execute arbitrary code, compromise user data, or cause system instability.
To ensure protection against these vulnerabilities, users are strongly advised to update their Chrome browsers immediately. Follow these steps:
Hence, users should always keep their browsers updated to benefit from the latest protections against emerging threats.
Organizations are also encouraged to implement browser isolation techniques and educate employees about avoiding untrusted websites.
Integrating Application Security into Your CI/CD Workflows Using Jenkins & Jira -> Free Webinar