Chrome 150 Update Patches Severe Memory Safety Bugs
Google released Chrome 150 to address seven memory safety vulnerabilities, including critical use-after-free flaws within components like CameraCapture and GPU. While no exploits have been reported, Google urges users to update immediately due to ongoing targeting of these types of vulnerabilities by threat actors.
Google has released Chrome 150, a security update designed to address seven memory safety vulnerabilities. These flaws include three critical-severity use-after-free issues affecting CameraCapture, GPU, and Network components. Furthermore, the update resolves three high-severity use-after-free problems in Cast, Ozone, and Aura. The seventh vulnerability is an out-of-bounds read and write flaw within the V8 JavaScript engine, identified by OpenAI Codex Security. Google has not yet determined the bounty amount for this discovery. Google has been actively working to improve Chrome’s security posture over the past several years, including a shift towards memory-safe programming languages and leveraging AI to identify vulnerabilities. Since April, the company has patched over 1,400 Chrome vulnerabilities, with a significant portion being memory safety issues discovered internally.