CriticalAPT
Google Fixes 52 Chrome Security Flaws, Including Four Critical Vulnerabilities
Cyber Security News·Source published ·1 min read
What happened?
Google released a Chrome security update that fixes 52 vulnerabilities, including four critical flaws affecting FileSystem, FileAPI, Skia, and Layout. According to the release notice, the Stable channel is moving to version 156.0.8078.73/.74 for Windows and Mac. At the same time, Linux users will receive version 156.0.8078.73. The update will reach users over the coming days and weeks. The supplied security list includes four critical vulnerabilities, 46 high-severity issues, and two medium-severity bugs.
Key details
- Google released a Chrome security update fixing 52 vulnerabilities, including four critical flaws.
- The Stable channel moves to version 156.0.8078.73/.74 for Windows and Mac, and 156.0.8078.73 for Linux.
- Four critical vulnerabilities affect FileSystem, FileAPI, Skia, and Layout components.
- The update includes 46 high-severity and two medium-severity bugs across browser functions.
- Critical flaws were reported by Xinyang Ge of Anthropic with assistance from Claude on multiple dates.
- Google states the notice does not describe specific attack methods or confirm remote code execution.
- High-severity fixes cover memory corruption, use-after-free, input validation, access control, and authorization flaws.
Affected
- Chrome Stable channel versions before 156.0.8078.73/.74 on Windows and Mac.
Fixes and mitigations
- Update Chrome via the About Google Chrome menu and relaunch after installation.
- Linux users should update through their package manager.
- Administrators should keep automatic updates enabled on managed Windows devices.
Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.