Google Chrome Browser (130.0.6723.91/.92) Security Update Advisory

Overview

 

Google has released an update to address a vulnerability in the Chrome(https://www.google.com/chrome) browser. Users of affected versions are advised to update to the latest version.

 

Affected Products

 

Chrome version prior to 130.0.6723.91 (Linux)

Chrome version prior to 130.0.6723.91/.92 (Windows)

 

Resolved Vulnerabilities

 

Critical out-of-bounds write vulnerability in the Dawn function (CVE-2024-10487) [1]

High severity memory free and reuse (UAF) vulnerability in the Webrtc function (CVE-2024-10488) [1]

 

Vulnerability Patches

 

The following Vulnerability Patches were made available in the October 29, 2024 update. For more information on Vulnerability Patches, Please refer to the “Google Chrome” Referenced Sites document.

Chrome 130.0.6723.91/.92 or later version (Windows)

Chrome 130.0.6723.91 or later version (Linux)

 

Referenced Sites

 

[1] Stable Channel Update for Desktop

https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_29.html

[2] Chrome Update

https://support.google.com/chrome/answer/95414?co=GENIE.Platform%3DDesktop