The Chrome team has announced the latest update, Chrome 120, rolling out to Windows, Mac, and Linux systems. This significant update, containing numerous fixes and improvements, aims to bolster the stability and security of the browsing experience.
An integral aspect of Chrome 120 is its focus on security enhancements, encompassing a total of 10 crucial fixes. Notably, several external researchers significantly contributed to addressing vulnerabilities within the browser. Below are the highlighted security fixes, shedding light on the nature of the vulnerabilities and their contributors:
High CVE-2023-6508: Addressed a use-after-free issue in Media Stream. Reported by Cassidy Kim (@cassidy6564) on 2023-10-31, this fix bears a reward of $10000.
High CVE-2023-6509: Resolved a use-after-free vulnerability in Side Panel Search, credited to Khalil Zhani's report on 2023-10-21, earning a reward of $1000.
Medium CVE-2023-6510: Mitigated a use-after-free issue within Media Capture, reported by [pwn2car] on 2023-09-08, acknowledging a $1000 reward.
Low CVE-2023-6511: Rectified an inappropriate implementation flaw in Autofill, flagged by Ahmed ElMasry on 2023-09-04, meriting a reward of $2000.
Low CVE-2023-6512: Addressed an inappropriate implementation in Web Browser UI, brought to attention by Om Apip on 2023-06-24, warranting a reward of $1000.
It's noteworthy that while these security fixes are instrumental in fortifying Chrome's resilience against potential threats, access to detailed bug information may remain restricted until a majority of users receive the update. Restrictions might also persist if the bug is tied to a third-party library awaiting resolution.
For more information on the release refer to Google's Chrome Ralease Blog.
For more comprehensive insights into these security fixes and additional information regarding Chrome's security, users are encouraged to refer to the Chrome Security Page.
