Google has released updates for Chrome 97.0.4692.99 and 96.0.4664.174 (Extended Stable), fixing 26 vulnerabilities, including a critical vulnerability (CVE-2022-0289) that allows bypassing all browser security levels and executing code on the system outside the sandbox environment. Details are not yet disclosed; it is known that the critical vulnerability is related to a use-after-free issue in the implementation of Safe Browsing mode.
Other fixed vulnerabilities include issues with use-after-free in the site isolation mechanism, the Web pack technology, and code related to handling Push notifications, the Omnibox address bar, printing, using the Vulkan API, editing input methods, and working with bookmarks. Issues leading to buffer overflows were identified in the web developer tools and the PDF viewer PDFium. Security-affecting errors were fixed in the autofill functionality, Storage API, and Fenced Frames API.
Source: opennet.ru
