Advisory

Google releases update for Chrome, patches critical flaw

Take action: Once again, time to click update on your Google Chrome and Chromium browsers (Opera, Edge, Brave). This update is serious - because Google has marked a numerically high severity flaw as critical. As usual, they are not sharing details, but it's very possible this is an easy explot, so the critical treatment. Don't delay, patching is super easy and all your tabs reopen.


Learn More

Google has released a critical update for its Chrome browser, addressing two major security vulnerabilities in the Stable and Extended Stable channels. The updated versions are 130.0.6723.91/.92 for Windows and Mac, and 130.0.6723.91 for Linux.

  • CVE-2024-10487 (CVSS score 8.8, Google rank Critical) - Out-of-Bounds Write flaw in Dawn graphics system. Allows attackers to write beyond allocated memory, which could lead to remote code execution or system crashes.

  • CVE-2024-10488 (CVSS score 8.8, Google rank ) - Use-After-Free flaw in WebRTC. Allows arbitrary code execution or crashes by accessing freed memory, posing a risk of data breaches.

Users are urged to update Chrome immediately via "About Google Chrome" in the browser’s settings. The update will be rolled out automatically but may require a manual restart of the browser to apply the changes.

Google releases update for Chrome, patches critical flaw