The update fixes vulnerabilities across graphics, accessibility, rendering and communication features. Google said the rollout would reach all users over the coming days and weeks. The patched versions are 156.0.8078.47 for Linux users and 156.0.8078.47 or 156.0.8078.48 for Windows and Mac users.
Of the 353 security flaws addressed in the update, six have been classified as critical, the highest threat level. Five of these vulnerabilities involve memory corruption in different components of the browser, including the Skia graphics engine, CSS styling, the Paint component, WebRTC and Accessibility features.
The sixth critical vulnerability is a use-after-free flaw in the Accessibility section. Such flaws occur when software mishandles memory that has already been freed, potentially creating opportunities for malicious actors to exploit the affected application.
Google's security advisory does not state that any of the six critical vulnerabilities are currently being exploited by hackers in real-world attacks. The company is also withholding detailed information about the bugs until most users have updated their browsers.
The discovery of several vulnerabilities also highlights the growing role of artificial intelligence in cybersecurity research. While Google's own team identified issues such as the Skia graphics vulnerability, external security researchers used AI tools to help uncover some of the most serious flaws.
A researcher at Anthropic used the company's Claude AI to help identify the critical use-after-free vulnerability in Chrome's Accessibility component. Separately, OpenAI Codex Security, known as kylebot, discovered the critical WebRTC vulnerability.
These findings demonstrate how AI tools are increasingly being used alongside human security researchers to identify software vulnerabilities. However, the discoveries were not made entirely by autonomous AI systems, with human researchers also playing a role in the process.
For users, installing the latest Chrome update is an important step in addressing the vulnerabilities covered by the release. To update the browser, users need to open Google Chrome on their computer and click the three-dot menu in the top-right corner.
They should then select Help and click About Google Chrome. The browser will automatically check for available updates and download the latest version if one is available.
Once the download is complete, a Relaunch button will appear. Users must click it to restart Chrome and complete the installation, as downloading the update alone does not finish the process.
For office computers, administrators can use Chrome Enterprise tools to ensure that browsers restart after updates have been downloaded. With the release addressing 353 security flaws, including six critical vulnerabilities, updating Chrome to a patched version remains the key step for users to receive the fixes.
About The Author
Comment List