[German]Google has released an update of the Google Chrome browser (branch 123) in the stable channel on March 26, 2024, which closes seven vulnerabilities (some of them critical). The Extended Stable Channel and the app for Android have also received an update. Here is an overview of these updates.
Advertising
Google Chrome (Stable) 123.0.6312.86/.87
The announcement can be found in the Google blog. The stable channel has been updated to version 123.0.6312.86/.87 for macOS and Windows. For Linux, the update updates the browser to version 123.0.6312.86. This update will be released in the next few days/weeks. According to Google, 7 vulnerabilities have been closed, with the following security fixes explicitly listed.
- [$10000][327807820] Critical CVE-2024-2883: Use after free in ANGLE. Reported by Cassidy Kim(@cassidy6564) on 2024-03-03
- [TBD][328958020] High CVE-2024-2885: Use after free in Dawn. Reported by wgslfuzz on 2024-03-11
- [N/A][330575496] High CVE-2024-2886: Use after free in WebCodecs. Reported by Seunghyun Lee (@0x10n) of KAIST Hacking Lab, via Pwn2Own 2024 on 2024-03-21
- [N/A][330588502] High CVE-2024-2887: Type Confusion in WebAssembly. Reported by Manfred Paul, via Pwn2Own 2024 on 2024-03-21
In addition, there are various corrections from internal audits, fuzzing and other initiatives. The browser is updated automatically. You can also try to update the browser manually (via the menu and the About Google Chrome command). The latest build of the Chrome browser can also be downloaded here.
Google Chrome (Extended) 122.0.6261.148
This post on the Google blog says the stable channel has been updated to version 122.0.6261.148 for macOS and Windows. This update will be released in the next few days/weeks.
Chrome for Android 123.0.6312.80
Furthermore, according to this Google post, Google Chrome for Android has been updated to version 123.0.6312.80 and will be distributed via update in the next few days. This version contains stability and performance improvements, as well as the same security fixes as mentioned above for the desktop versions of the browser.
