Google Chrome 118.0.5993.15 and 119.6045.199/.200

[German]Google has released updates of the Google Chrome browser in the Stable Channel for Mac, Linux and Windows to version 119.0.6045.199/.200 on November 28, 2023. Version 118.0.5993.15 was released in the Extended Stable Channel. The Android app of the Chrome browser has also been updated. The updates contain security fixes. Here is an overview of these updates.

Google Chrome 119.6045.199/.200

The announcement can be found in the Google blog. The stable channel has been updated to version 119.0.6045.199 for macOS and Linux. For Windows, the update updates the browser to version 119.0.6045.199/.200. Google states that it has fixed the following vulnerabilities.

• [N/A][1491459] High CVE-2023-6348: Type Confusion in Spellcheck. Reported by Mark Brand of Google Project Zero on 2023-10-10
• [$31000][1494461] High CVE-2023-6347: Use after free in Mojo. Reported by Leecraso and Guang Gong of 360 Vulnerability Research Institute on 2023-10-21
• [$10000][1500856] High CVE-2023-6346: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2023-11-09
• [$7000][1501766] High CVE-2023-6350: Out of bounds memory access in libavif. Reported by Fudan University on 2023-11-13
• [$7000][1501770] High CVE-2023-6351: Use after free in libavif. Reported by Fudan University on 2023-11-13
• [N/A][1505053] High CVE-2023-6345: Integer overflow in Skia. Reported by Benoît Sevens and Clément Lecigne of Google's Threat Analysis Group on 2023-11-24

In addition, there are various fixes from internal audits, fuzzing and other initiatives. Google is aware that an exploit for CVE-2023-6345 exists in the wild.

Chrome will be rolled out to systems via the automatic update function in the coming days and weeks. You can (and should in this case) also update the browser manually (via the menu and the About Google Chrome command). The latest build of the Chrome browser can also be downloaded here.

Google Chrome 118.0.5993.15

Google Chrome for macOS and Windows has been updated to version 118.0.5993.15 in the Extended Stable Channel (see this announcement).

Chrome for Android 119.0.6045.193

Furthermore, according to this Google post, Google Chrome for Android has been updated to version 119.0.6045.193 and will be distributed via update in the next few days. This version contains stability and performance improvements, as well as the same security fixes as mentioned above for the desktop versions of the browser.