Google has released a new update on the Stable channel for its Chrome browser, addressing a series of security vulnerabilities.
The update has been rolled out as version 131.0.6778.139/.140 for Windows and Mac, and 131.0.6778.139 for Linux.
Users can expect the patch to become available over the coming days and weeks. A comprehensive list of changes in this build is accessible in the official Chrome changelog log.
.png
)
Security Fixes and Highlights
According to the Chrome Blog, the latest update includes three critical security fixes, two of which were identified by external researchers.
Leveraging 2024 MITRE ATT&CK Results for SME & MSP Cybersecurity Leaders – Attend Free Webinar
Google has temporarily restricted access to bug details to ensure most users are protected before full disclosure.
Additionally, details will remain limited if the issues stem from third-party libraries still awaiting a resolution. Here is a breakdown of the notable fixes:
- CVE-2024-12381: Type Confusion in V8
- Severity: High
- The flaw in V8, Chrome’s JavaScript engine, could potentially allow attackers to execute arbitrary code by exploiting type confusion errors.
- CVE-2024-12382: Use-After-Free in Translate
- Severity: High
- This vulnerability involves a use-after-free issue in the translation feature, which might allow malicious actors to gain unauthorized access or crash the browser.
Google expressed its gratitude to all external contributors who reported these vulnerabilities and collaborated to enhance Chrome’s security posture.
The company also highlighted the importance of internal audits, fuzz testing, and other proactive measures that helped uncover additional vulnerabilities addressed in this release.
Chrome users are urged to update their browsers immediately to stay protected from these critical exploits.
To update, navigate to Settings > About Chrome and ensure you’re using the latest version. Regular updates are essential to guard against potential security risks and maintain a safe browsing experience.
Investigate Real-World Malicious Links,Malware & Phishing Attacks With ANY.RUN - Try for Free
