Chrome simply patched some high-risk safety flaws, so go replace now

Final week, Google launched Chrome 128 and patched a zero-day vulnerability with it. Now, Google has launched updates to Chrome 128 that repair 4 safety vulnerabilities (none of which have been exploited within the wild but). Different Chromium-based browsers are prone to observe quickly.

Within the Chrome Releases weblog replace, Prudhvikumar Bommana lists the 4 patched vulnerabilities that have been found by exterior safety researchers and reported to Google.

All 4 vulnerabilities are categorized as “excessive threat” by Google. The sort confusion subject within the V8 JavaScript engine was included twice this week (CVE-2024-7969, CVE-2024-8194). The opposite two vulnerabilities are additionally siblings: they’re buffer overflows within the open-source 2D graphics library Skia (CVE-2024-8193, CVE-2024-8198).

Chrome often updates itself routinely when a brand new model is out there, but when your browser hasn’t up to date but, you possibly can set off it with a guide replace test: open the three-dot menu and navigate to Assist > About Google Chrome.

Different Chromium-based browsers

As of now, different Chromium-based browsers are nonetheless catching up. Courageous and Microsoft Edge have already made the swap to Chromium 128 however are solely as much as final week’s safety degree.

In the meantime, Opera model 113 solely simply switched to Chromium 127, Vivaldi model 6.8 nonetheless depends on the Prolonged Secure Channel of Chromium model 126, and Vivaldi model 6.9 is up-to-date because it’s now based mostly on the most recent Chromium 128.

All 4 browsers are secured towards the CVE-2024-7971 zero-day vulnerability from the earlier week.

Additional studying: Tricks to make Google Chrome safer