Memory Bugs Account for Most of Chrome’s 353 New Security Fixes
Google on Tuesday announced the promotion of Chrome 156 to the stable channel with patches for 353 vulnerabilities.
Most of the resolved security defects were memory safety flaws, including 163 memory corruption bugs, 125 use-after-free issues, and 17 out-of-bounds reads. Of the remaining weaknesses, 36 are improper input validations.
The browser refresh resolves six critical-severity vulnerabilities: five memory corruption defects and one use-after-free bug.
Chrome 156 also resolves 61 high-severity security issues, 197 medium-severity flaws, and 89 low-severity weaknesses.
Google makes no mention of any of these vulnerabilities being exploited in the wild.
Per the internet giant’s advisory, no bug bounty reward will be paid for 285 vulnerabilities. They were either found by Google (266), Xinyang Ge (Anthropic – assisted by Claude), or OpenAI Codex Security.
Advertisement. Scroll to continue reading.
Google says it handed out $50,000 in bug bounties for 24 of the vulnerabilities, but the final amount...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
