Google has released an important security update for Chrome, addressing three critical vulnerabilities that could put users at serious risk.
The latest version (131.0.6778.139/.140 for Windows and Mac, and 131.0.6778.139 for Linux) is being rolled out gradually and is expected to be available to all users within the next few days.
Critical Vulnerabilities Fixed
The update aims to address three high-severity vulnerabilities :
Read more: Google Chrome fixes critical vulnerabilities
- Type Confusion in V8: A serious vulnerability (CVE-2024-12381) was discovered by security researcher Seunghyun Lee (@0x10n) on December 2, 2024. This weakness in JavaScript could allow arbitrary code execution or cause serious system errors.
- Use-after-free in Translate: Another high-severity vulnerability (CVE-2024-12382) was reported by lime (@limeSec_) of Legendsec's TIANGONG Team to QI-ANXIN Group on November 18, 2024. This vulnerability in Chrome's translate feature could lead to memory corruption and possible exploitation.
- Unspecified High Severity Vulnerability: Details of the third vulnerability have not yet been made public, likely to prevent its exploitation before users complete updates.
See also: Type Confusion vulnerability in Google Chrome allows remote access
Google's prompt response underscores the seriousness of these risks and its commitment to security. Users are strongly advised to update Chrome without delay to minimize any threats.
How to update Chrome
Chrome usually updates automatically, but users can manually check the version by going to settings and selecting “About Chrome.”.
The importance of updates
This update is part of Google's ongoing effort to strengthen the security of its browser. External security researchers, as well as the company's internal security , play a key role in identifying and fixing such issues.
Read more: Google's AI OSS-Fuzz tool finds 26 vulnerabilities
Google implements advanced techniques such as AddressSanitizer, MemorySanitizer, and Control Flow Integrity to detect and prevent security errors.
Source: cybersecuritynews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
