Google has released Chrome version 127.0.6533.99, which fixes 6 vulnerabilities, including a critical vulnerability (CVE-2024-7532) that allows bypassing all levels of browser protection and executing code on the system outside the sandbox environment. Details are not yet disclosed, but it is known that the critical vulnerability is caused by a buffer overflow in the ANGLE layer, responsible for translating OpenGL ES calls to OpenGL, Direct3D 9/11, Desktop GL, Metal, and Vulkan.
The other vulnerabilities are marked as high-risk and involve use-after-free memory access in the WebAudio API implementations (CVE-2024-7536) and Sharing (CVE-2024-7533), out-of-bounds memory write in the Layout component (CVE-2024-7534), type confusion in the V8 engine (CVE-2024-7550), and an error in the implementation of V8 engine components (CVE-2024-7535).
Source: opennet.ru
