Google has released Chrome 130, addressing 17 security vulnerabilities in the popular web browser. This latest update, version 130.0.6723.58/.59 for Windows and Mac and 130.0.6723.58 for Linux is being rolled out gradually to users over the coming days and weeks.
Among the 17 security fixes, several were contributed by external researchers and classified according to severity.
The most critical vulnerability, rated as high severity, is CVE-2024-9954, a use-after-free flaw in the AI component of Chrome. This vulnerability was reported by a researcher known as DarkNavy and earned a substantial bounty of $36,000.
How to Choose an ultimate Managed SIEM solution for Your Security Team -> Download Free Guide(PDF)
The update also addresses multiple medium-severity vulnerabilities, including issues in Web Authentication, UI, PictureInPicture, DevTools, Dawn, and Parcel Tracking. These flaws range from use-after-free bugs to inappropriate implementations and insufficient data validation.
Google has implemented its standard practice of restricting access to detailed bug information until the majority of users have updated their browsers. This measure is designed to protect users from potential exploitation while the update is being distributed.
Chrome users are strongly advised to update their browsers as soon as possible to ensure protection against these security flaws. To update Chrome, users can navigate to the browser’s settings, click on “About Chrome,” and allow the browser to check for and install any available updates.
This release underscores Google’s ongoing commitment to browser security and the importance of its bug bounty program in identifying and addressing potential vulnerabilities.
The company has expressed gratitude to all security researchers who contributed to making Chrome more secure during its development cycle.
Strategies to Protect Websites & APIs from Malware Attack => Free Webinar
Four security flaws described in the supplied Apache Struts advisories could expose affected applications to…
A former infrastructure engineer has been sentenced to 32 months in federal prison for sabotaging…
A new GitHub Copilot CLI finding that could allow an attacker-controlled web page to guide…
Every function in a security operations center, from alert triage to incident response, depends on…
ASOS is investigating a cyber incident after customers received an unauthorized app notification claiming hackers…
Silver Springs, United States / Maryland, October 6th, 2026, CyberNewswire Aembit, the identity control plane…