Skip to content

Back to the catalog

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical
securityweek.comarticle

Chrome 157 Rolls Out With 213 Security Fixes, Seven Rated Critical

Chrome 157 reached the stable channel with fixes for 213 vulnerabilities, seven rated critical, including a buffer overflow in Dawn (WebGPU, $10,000 reward) and memory corruption in ANGLE ($1,000). Also fixed are 77 high-severity bugs. The most common classes are incorrect authorization (51) and use-after-free (45). Google reports $31,000 paid, no in-the-wild exploitation, and versions 157.0.8103.38/.39.

TL;DR Chrome 157 patches 213 flaws, seven critical memory-safety bugs led by Dawn and ANGLE issues, with no known exploitation.
Open original ↗
Document

What it is

Chrome 157 is the stable-channel release that patches 213 vulnerabilities, seven of them critical. SecurityWeek's report is based on Google's advisory.

Preconditions / Affected

The release is rolling out as 157.0.8103.38/.39 on Windows and macOS, and as 157.0.8103.38 on Linux. Linux has no .39 build. Google does not mention exploitation in the wild for any of the fixes.

What to do

Update Chrome to 157.0.8103.38 or later (.39 on Windows and macOS) and restart the browser.

Detail the headline numbers leave out

The seven critical bugs are:

  • The Dawn (WebGPU) buffer overflow, with a $10,000 reward.
  • The ANGLE memory corruption, with a $1,000 reward.
  • Five more with no reward listed: four use-after-free bugs and one buffer overflow.

Google reported two of those five. Xinyang Ge of Anthropic reported two. Wenbin Liu reported the fifth.

Among the 77 high-severity fixes, more than a dozen came from external researchers. Google disclosed bounties for only two: $10,000 for an incorrect authorization bug and $2,000 for an out-of-bounds read.

The full vulnerability mix is:

  • Incorrect or missing authorization: 51
  • Use-after-free: 45
  • UI misrepresentation: 19
  • Type confusion: 13
  • Information leak: 13
  • Out-of-bounds read/write: 11
  • Improper input validation: 9
  • Uninitialized resource: 9

Caveats

Google has not yet set bounties for 39 of the flaws, so the $31,000 total is incomplete. The report gives no CVE identifiers and no technical detail on any individual bug.

Organisations named here

  • Anthropic
  • Google
  • Wenbin Liu

Technologies named here

  • ANGLE
  • Windows
  • macOS
  • Linux
  • Chrome
  • Dawn
  • Google Chrome 157 (versions before 157.0.8103.38/.39 on Windows and macOS, and before 157.0.8103.38 on Linux)

Standards and laws named here

  • WebGPU

Techniques named here

  • Buffer overflow
  • Use-after-free
  • Memory corruption
  • UI misrepresentation
  • Type confusion
  • Improper input validation
  • Out-of-bounds read/write

Concepts named here

  • Bug bounty
  • Exploitation in the wild
  • Incorrect/missing authorization
  • Information leak
  • Uninitialized resource

Also named here

  • Xinyang Ge

Related in AppSec