Update for Google Chrome available
New version 116.0.5845.111 for Windows fixes high-risk security vulnerabilities.
Google has released updated versions of the Chrome web browser. The updates fix five vulnerabilities, four of which the developers have classified as high risk and one as a medium risk.
As the programmers write in the [Releases Blog] (https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html), older versions contain use-after-free vulnerabilities in the Vulkan interfaces (CVE-2023-4430, no CVSS, risk high) and in the loader (CVE-2023-4429, high) affected. The program code incorrectly accesses resources that have already been released, which attackers can often abuse to inject malicious code. It is usually sufficient to display carefully prepared websites in the web browser.
Furthermore, when processing manipulated CSS, access outside of the intended memory areas could be provoked (CVE-2023-4428, high), also in the JavaScript engine V8 (CVE-2023-4427, high).
Chrome versions 116.0.5845.114 for Android, 116.0.5845.118 for iOS, 116.0.5845.110 for Linux and Mac and 116.0.5845.110/.111 for Windows fix these security-related errors.
Anyone using Google Chrome should update quickly due to the severity of the vulnerabilities. Since the gaps can also be found in the underlying Chromium project, it is to be expected that browsers based on them, such as Microsoft's Edge, will also be released in an updated version shortly.
Google now wants to update the Chrome web browser weekly. This should ensure that security updates reach users more quickly the company announced earlier this month. To ensure that the browser is running in the latest version, just click on the settings menu, which can be found to the right of the address bar under the icon with the three stacked dots, and then click Help - About Google Chrome.
The version dialog shows the currently running version of the browser and starts the update process if available. At the end, the dialog prompts you to restart the web browser.