Network Security, Patch/Configuration Management, Vulnerability Management

Google’s desktop update for Chrome squashes two bugs

September 12, 2018

Google yesterday updated the its browser for Windows, Mac and Linux machines, fixing two vulnerabilities, including one considered high in severity.

In a blog post, Google described the more serious bug as a "function signature mismatch" in WebAssembly binary language. The vulnerability has yet to be assigned a CVE number, but it did manage to fetch a $3,000 bug bounty for Kevin Cheung from Autodesk, who reported the problem.

A second, medium-severity bug consists of a URL spoofing condition in Chrome's Omnibox address bar, which was reported by evi1m0 of Bilibili Security Team.

In addition to releasing Chrome desktop version 69.0.3497.92, Google also updated its Chrome for Android browser to version 69.0.3497.91. While Google said the new release includes bug fixes, the blog post does not detail what those improvements are.

Google’s desktop update for Chrome squashes two bugs

Learn More

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.