Google is on a roll with its security updates. The company is rolling out a new Chrome update as version 153.0.8010.47/.48 for Windows and Mac, and 153.0.8010.47 for Linux.
This new build is packed with vulnerability fixes. In total, the update addresses 42 security flaws, with 3 of them being marked as critical. In other words, it’s best if you don’t hold off on updating your browser to prevent attackers from exploiting these vulnerabilities.
While 42 security fixes might not sound like a lot compared to the massive 300-plus fixes that arrived late last month, it doesn’t negate the seriousness of these flaws.
Just a couple of weeks ago, we saw another Chrome update that tackled two critical flaws, so seeing three more pop up this quickly definitely raises an eyebrow.
Details shared in the official blog post for the new release reveal that these vulnerabilities involve memory handling issues, including use-after-free flaws in core components of the browser and a read error in the WebGL graphics engine.
If none of this rings a bell, it basically means that these flaws can give an attacker room to escape the browser sandbox and run malicious code on your machine if you stumble onto the wrong site. Of course, that’s not something you want to happen.
As usual, Google has refrained from sharing all the details on exactly how an attacker could exploit these vulnerabilities. They want to keep the details under wraps until a majority of users are updated and protected from these flaws.
Beyond the top three critical items, the build cleans up dozens of high and medium-severity problems across the JavaScript engine, extensions, and web workers. It feels like Google has been on an endless bug-hunting spree lately, squashing dozens of security gaps every few weeks.
The update is rolling out gradually right now, so your browser might not have updated on its own yet. Still, you can check for it manually by opening the browser’s Settings menu, clicking About Chrome, and letting it scan for a new update. If you have a pending update, install it and relaunch the browser.
