Google has released a new update for Chrome, version 149, which addresses 18 significant security vulnerabilities. This update includes fixes for four critical and 14 high-severity vulnerabilities, with more than half being use-after-free issues. Use-after-free vulnerabilities are a type of memory corruption bug that can potentially lead to remote code execution, posing a serious risk if exploited.
The update also addresses other types of vulnerabilities such as out-of-bounds read, inappropriate implementation, uninitialized use, and insufficient validation of untrusted inputs. According to Google's advisory, the most severe flaw was reported by an anonymous researcher, though the bug bounty amount for this discovery has not yet been disclosed.
Interestingly, Google itself discovered 17 of the 18 security flaws, continuing a recent trend likely influenced by the use of artificial intelligence in vulnerability detection. Google has not reported any incidents of these vulnerabilities being exploited in the wild.
This latest iteration of Chrome is available as versions 149.0.7827.196/197 for Windows and macOS users, and as version 149.0.7827.196 for Linux users. Users are encouraged to ensure that their Chrome browsers are updated to the latest version to protect against these vulnerabilities.