Google Chrome 157 Update Fixes 213 Security Vulnerabilities, Seven Rated Critical

Google has released Chrome 157, introducing a major security update that addresses 213 vulnerabilities, including seven classified as critical security flaws. The latest release aims to strengthen browser security and protect users against potential cyber threats by fixing multiple flaws affecting different components of the browser.

Among the most serious issues addressed are memory-safety vulnerabilities in Dawn, Google’s open-source implementation of the WebGPU standard, and ANGLE, a graphics engine abstraction layer. The update fixes a buffer overflow vulnerability in Dawn and a memory corruption issue in ANGLE, both of which could potentially expose users to security risks.

The release also resolves 77 high-severity vulnerabilities, many of which were identified by external security researchers. According to the reported findings, the security flaws include 51 incorrect or missing authorisation issues, 45 use-after-free vulnerabilities, 19 user-interface misrepresentation flaws, 13 type-confusion issues and 13 information leaks.

Google has also acknowledged the contributions of security researchers through its bug bounty programme. The company has awarded a combined $31,000 in rewards for identifying and reporting vulnerabilities addressed in the update. The researcher who discovered the buffer overflow issue in Dawn received $10,000. Although the latest update addresses a substantial number of security weaknesses, Google has not reported evidence that the vulnerabilities are being actively exploited in real-world cyberattacks.

Chrome 157 is being distributed through the stable channel for Windows, macOS and Linux users. The updated versions include 157.0.8103.38/.39 for Windows and macOS, while Linux users will receive version 157.0.8103.38.  Users are advised to install the Chrome security update promptly to reduce exposure to potential attacks and ensure protection against the vulnerabilities identified in the release.