Google Releases Chrome 157 Update to Fix 213 Vulnerabilities

Google has released Chrome 157 to its stable channel, patching 213 security vulnerabilities. The update includes fixes for seven flaws rated as critical, most of which involve memory safety issues.

Among the most significant vulnerabilities addressed is a buffer overflow issue in Dawn, the open-source and cross-platform implementation of the WebGPU standard. A second critical flaw involves memory corruption within ANGLE, an open-source graphics engine abstraction layer.

The update also resolves 77 high-severity vulnerabilities. The most common types of security defects addressed in this release include incorrect or missing authorisation (51), use-after-free defects (45), UI misrepresentation (19), and type confusion (13). Other addressed issues include information leaks, out-of-bounds reads and writes, and improper input validation.

Google has distributed $31,000 in bug bounty rewards to researchers involved in discovering these flaws, although the company has not yet finalised payouts for 39 of the vulnerabilities. Currently, Google reports that none of these security defects are being exploited in the wild.

Users are advised to update their browsers as soon as possible to mitigate potential risks. The latest iteration is rolling out as versions 157.0.8103.38/.39 for Windows and macOS, and version 157.0.8103.38 for Linux.