What happened
An update for Google Chrome, version 154, has been released to address a total of 108 vulnerabilities. The update resolves multiple security flaws classified as critical severity. These vulnerabilities are primarily related to memory safety and memory corruption issues within the browser component. Exploiting these flaws could allow malicious actors to execute arbitrary code remotely by leveraging the memory-related vulnerabilities, thereby posing a significant security risk.
Who is affected
Organisations running affected versions of Google Chrome are impacted by these vulnerabilities. The issues pertain to the Chrome browser itself and could be exploited through targeted attack vectors that involve the browser’s processing of web content. Affected deployments may include devices or systems where Chrome is used as the primary web browser.
Recommended actions
- Ensure that the most recent version of Google Chrome, version 154, is deployed across all affected systems.
- Verify that automatic updates are enabled, if available, to facilitate prompt installation of security patches.
- Review security policies to include checks for browser update statuses and ensure that vulnerable versions are not in use.
Indicators of compromise
None are currently available for these vulnerabilities.
