Google on Wednesday announced the release of Chrome 151 to the stable channel with patches for 370 vulnerabilities.
The update resolves seven critical-severity bugs, including four use-after-free issues in Compositing, Views, Skia, and Ozone.
Chrome 151 also resolves two critical-severity insufficient validation of untrusted input flaws in Dawn and ANGLE, and a critical race condition in Updater.
More than a dozen of the 71 high-severity defects addressed with the update are use-after-free vulnerabilities affecting Navigation, V8, Loader, Views, Autofill, Input, DataTransfer, DOM, ANGLE, Audio, Updater, and Media.
Other types of patched high-severity bugs include inappropriate implementation, insufficient policy enforcement, insufficient validation of untrusted input, uninitialized use, integer overflow, out-of-bounds read/write, type confusion, policy bypass, race condition, object lifecycle issue, and cryptographic flaw.
The fresh Chrome update also resolves 170 medium-severity weaknesses and 122 low-severity security defects.
It’s worth noting that 30 of the resolved vulnerabilities impact ANGLE (Almost Native Graphics Layer Engine), the open source WebGL backend that Chrome uses for all graphics rendering.
Google says it found 349 of the newly fixed security defects and credited external researchers for reporting 21 issues. The internet giant says it paid $58,500 in bug bounty rewards to the reporters, but has yet to disclose the amounts handed out for 13 flaws.
With the fresh round of security patches, Google has resolved over 1,800 vulnerabilities in Chrome since the beginning of the year.
The latest Chrome iteration is now rolling out as versions 151.0.7922.71/.72 for Windows and macOS, and as version 151.0.7922.71 for Linux.
Related: Critical VM Escape Vulnerability Patched in VMware ESXi
Related: JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack
Related: Apple Patches 87 Vulnerabilities in iOS, 155 in macOS Tahoe
Related: Unpatched Fastjson Vulnerability Exploited in Attacks
