The stable channel for desktops has been updated to version 128.0.6613.119/.120 for Windows and Mac, and 128.0.6613.119 for Linux.
This update will be gradually rolled out over the coming days and weeks. For those using the Extended Stable channel, version 128.0.6613.120 is now available for Windows and Mac. The full list of changes is in the build log.
This latest update includes four critical security fixes, with two significant contributions from external researchers.
What Does MITRE ATT&CK Expose About Your Enterprise Security? - Watch Free Webinar!
Notably, Cassidy Kim, a security researcher, identified two high-severity vulnerabilities:
These vulnerabilities highlight the ongoing collaboration between Google and the security research community to enhance user safety.
Access to detailed bug information remains restricted until most users have received the update, minimizing potential exploits.
Beyond external contributions, Google continues to invest in internal security measures. The update includes fixes from internal audits, fuzzing, and other security initiatives.
Tools such as AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, and AFL are crucial in identifying and mitigating security bugs.
Google encourages users to participate in improving Chrome’s security and performance. Instructions on how to switch are available for users interested in exploring different release channels.
The community help forum is also available for reporting new issues and learning about common problems.
As always, Google extends its gratitude to all security researchers who contribute to making Chrome a safer browser for millions of users worldwide.
Are You From SOC/DFIR Teams? - Try Advanced Malware and Phishing Analysis With ANY.RUN - 14 day free trial
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…
Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…
Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…
A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…
GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…
Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…