Google pushes second Chrome update this week
Google issued a security update to Chrome's Stable channel on November 11, just two days after the previous update, addressing 83 security vulnerabilities including five Critical-rated issues.
The update is rolling out over the coming days and weeks for Windows, Mac, and Linux users, bringing Chrome to versions 157.0.8103.78/.79 for Windows and Mac and 157.0.8103.78 for Linux. Most Chrome users are on the Stable channel, making this update particularly important for widespread security protection.
Critical vulnerabilities identified
Among the 83 security fixes, five are rated Critical—the highest severity level. All five Critical vulnerabilities are use-after-free (UAF) flaws, which occur when software accesses memory after it has been released for reuse.
Potential consequences
The consequences of these UAF flaws range from crashes and corrupted data to information leaks and, in some cases, execution of attacker-controlled code. The dangerous possibility is that an attacker can influence what replaces the freed object, then trick the program into treating that replacement as legitimate data or instructions.
How to update Chrome
Users can allow Chrome to update automatically or manually check for updates by opening About Google Chrome from the Settings or Help menu. If prompted, users should click Relaunch to apply the update. Manual updates ensure users aren't waiting for the rollout to reach them automatically.
Related
