Google has released a new version of Chrome, version 150.0.7871.46/47 for Windows and macOS, and 150.0.7871.46 for Linux. This update addresses a significant number of security vulnerabilities, with just under 400 flaws fixed.
According to Google, none of the patched flaws are being exploited in the wild yet. The company discovered 358 of the vulnerabilities itself, with the remaining 24 identified by external security researchers. Google has awarded these researchers a total of nearly $90,000 in bounties.
The update includes fixes for 15 critical vulnerabilities, including use-after-free (UAF) vulnerabilities in various components such as the Dawn graphics library. Three vulnerabilities can be exploited due to insufficient validation of input data, including user input.
Additionally, 67 security vulnerabilities are classified as high risk, while 169 are considered medium risk and 131 low risk. The largest categories of flaws fixed include "inappropriate implementation" (accounting for 82 of them), "insufficient validation" of inputs (79 of them), and "use-after-free" vulnerabilities (72 of them).
Chrome usually updates automatically when a new version is available. Users can manually check for updates via the menu Help → About Google Chrome, or by going to Settings → About Google Chrome.
The same vulnerabilities are addressed in the Android version of Chrome, which was released this week, as well as the iOS version released last week. The Extended Stable Channel (ESC) for Windows and macOS now includes Chromium version 150.0.7871.47.
Looking ahead, the release of Chrome 151 is scheduled for the end of July. Users are advised to keep their browser up to date to ensure their PC remains secure and private. Proper antivirus protections are also essential for maintaining computer security.
