Google Chrome users should update their devices with the latest version of Chrome 127, which fixes numerous security issues. Fortunately, none of these vulnerabilities constitute a zero-day.
Security solutions for Google Chrome 127 crucial for users
Nearly a month after a major Chrome update, Google has rolled out another stable version for users. The new stable release of Google Chrome 127 offers numerous security fixes. As described in his advisoryThese patches address a number of serious vulnerabilities, listed below.
- CVE-2024-6990: A critical severity error that Google describes as “uninitialized usage in Dawn.” The company gave the researcher the alias “gelatin dessert” for reporting the vulnerability.
- CVE-2024-7255: A very serious ‘out of range read in WebTransport’, which caught Google’s attention after Marten Richter’s bug report.
- CVE-2024-7256: Another very serious problem that the researcher with the alias “gelatin dessert” found and reported to Google. The company described it to Dawn as an issue with insufficient data validation.
Google has released all these security fixes with Chrome 127.0.6533.88/89 for Windows and Mac and 127.0.6533.88 for Linux. Moreover, the tech giant also released the same security patches with Chrome 127 (127.0.6533.84) for Android.
Since all these vulnerabilities affected the Chromium engine, all Chromium-based web browsers became vulnerable. In this regard, Microsoft has issued separate advisories for its Chromium-based Microsoft Edge browser, confirming patch deployments CVE 2024 6990, CVE-2024-7255And CVE-2024-7256.
This Google release arrived days after a major Password Manager outage affected Chrome users. This outage typically affected Chrome 127.0.6533.57 – the predecessor to the recent stable version. We hope that this stable release will include other bug fixes in addition to the announced security patches, so that such issues do not occur again in the coming days.
Google has not reported any potential exploitation of these vulnerabilities in the wild. Nevertheless, given the severity of these errors, all users should ensure that their devices are immediately updated with the latest releases.
Let us know your thoughts in the comments.
