Google fixes high severity bug in latest version of Chrome web browser

Google has fixed a high-severity flaw in the latest version of Chrome browser that could lead to code execution.

The Google Chrome web browser had a use-after-free vulnerability in its “WebGL” component that could allow a user to execute arbitrary code in the context of the browser process.

A hacker could manipulate the memory layout of the browser in a way that they could gain control of the use-after-free exploit, which could ultimately lead to arbitrary code execution.

According to Jon Munshaw from Cisco Talos, the security researchers worked with Google to ensure that these issues are resolved and that an update is available for affected customers.

“This vulnerability specifically exists in ANGLE, a compatibility layer between OpenGL and Direct3D that Chrome uses on Windows systems,” Munshaw informed in a statement on Monday.

Read more

You may also like

Comments are closed.