Google Patches 37 Chrome Flaws, Including 7 Rated Critical
The count and severity mix matter less than the rollout: desktop users can patch manually right now, while Android users wait on a Play Store release that has not landed yet.
Reporting from 1 source: ASCII.jp.
Google released updates for desktop and Android versions of Chrome on October 13, fixing 37 vulnerabilities. Seven are rated Critical, 29 High, and one Medium. Desktop users on Windows, macOS, and Linux receive version 155.0.8059.79, while Android gets the same base version. The desktop update rolls out gradually over days to weeks, and the Android release is planned on Google Play within a few days.
The seven Critical fixes cover a buffer overflow in ANGLE, use after free in Browser, and use after free in PDF, among others. The High-severity set includes use after free in Desktop and in Bindings, plus insufficient authentication in Reading Mode. One Medium issue, a use after free in File System, rounds out the list.
Desktop builds arrive as version 155.0.8059.79 on Windows, macOS, and Linux, with Windows and macOS also carrying a .80 build. Android receives 155.0.8059.79. Chrome's settings menu allows a manual check rather than waiting for the automatic rollout.
Synthesized by Yomimono from the 1 cited source below, including Japanese-language reporting where cited, then editorially reviewed before publishing.
Sources
- ASCII.jp Google Chromeに重大な脆弱性 合計37件を修正、早めに更新を