Google has released updates for Chrome 99.0.4844.74 and 98.0.4758.132 (Extended Stable), addressing 11 vulnerabilities, including a critical vulnerability (CVE-2022-0971) that allows bypassing all browser security levels and executing code on the system outside of the sandbox environment. Details are not yet disclosed, but it is known that the critical vulnerability is related to accessing already freed memory (use-after-free) in the Blink rendering engine.
Other fixed vulnerabilities include issues with accessing already freed memory in the Safe Browsing mechanism, API Extensions, Splitscreen, user interface implementation, the New Tab page, and the ANGLE layer responsible for translating OpenGL ES calls into OpenGL, Direct3D 9/11, Desktop GL, and Vulkan. Additionally, the update addresses a buffer overflow in the code that handles GPU interactions.
Source: opennet.ru
