chrome news
4 stories
Critical Chrome Update Fixes Two Buffer Overflow Vulnerabilities
Google has released an urgent update for its Chrome desktop browser to address 15 security vulnerabilities, including two critical buffer overflow flaws that could allow remote code execution outside the browser's sandbox. The stable channel has been updated to version 151.0.7922.169/.170 for Windows and Mac users, and 151.0.7922.169 for Linux.
Chrome 150 Update Fixes 27 Security Flaws
Google has released an update for its Chrome browser, version 150, which addresses a total of 27 security vulnerabilities. Among the patched flaws, 13 were identified as use-after-free bugs, with two of these specifically noted as critical in severity. This update is crucial for users to maintain the security posture of their browsing environment.
Protecting Cookies with Device Bound Session Credentials
Google's Chrome browser is introducing a new security feature called Device Bound Session Credentials (DBSC) for Windows users, with support for macOS planned for the near future. This development is designed to significantly enhance protection against session hijacking, a common attack vector where attackers gain unauthorized access to user accounts by stealing session cookies.
VRP 2025 Year in Review
Google's Vulnerability Rewards Program (VRP) marked its 15th anniversary in 2025 by distributing a record $17 million in rewards to more than 700 security researchers worldwide. This annual figure represents a substantial increase in payouts and researcher participation.