Google has made changes to the release announcement of Chrome 149, revealing details about the fixing of 429 vulnerabilities. 22 vulnerabilities are marked as critical, while 87 are deemed dangerous. Critical issues allow bypassing all levels of browser protection and executing code on the system outside the sandbox environment. Details are currently undisclosed, but it has been mentioned that most critical problems are caused by buffer overflows or dereferencing freed memory in the ANGLE, Ozone, Chromecast, Chromoting, GFX components, and the process for interacting with the GPU. The highest reward for a vulnerability was $97,000.
Additionally, the publication of the June vulnerability report for Android can be noted, which mentions 124 vulnerabilities. 18 vulnerabilities are assigned a critical level of severity. 2 critical vulnerabilities exist in the frameworks and allow for remote attacks to execute code on the system without requiring any action from the user. 13 critical vulnerabilities are present in system components and allow escalation of privileges within the system. 3 critical issues have been identified in proprietary components of Qualcomm.
Source: opennet.ru
