Google has issued an urgent update for its Chrome browser, version 149, addressing 18 vulnerabilities, many of which are critical. A significant concern is the fix for ten "use after free" issues, a memory corruption flaw that could enable attackers to gain control, steal data, or crash systems. This includes three critical "use after free" bugs impacting WebGL, Autofill, and Bluetooth functionalities. Other serious patches cover a critical "out of bounds read" in Blink and "inappropriate implementation" flaws in Passwords. Google is deliberately withholding full bug details to allow users time to update before potential exploits emerge. The update is rolling out across Windows, Mac, and Linux, but users are strongly encouraged to manually update their browsers without delay for immediate protection, despite no active attacks being reported yet.
Kate O'Flaherty is a Senior Contributor at various prominent publications. With over a decade of experience, she specializes in cybersecurity and privacy, covering critical issues that impact users, businesses, and governments, while also delving into software development and SaaS within the tech and financial services sectors. Kate's work has been featured in notable outlets such as The Guardian, WIRED, and Forbes.
