Google releases Chrome 100 security update (100.0.4896.60) with fixes for 9 High risk vulnerabilities

By / / Security Updates & Patches, Vulnerabilities & Exploits / Chrome, Chrome 100, CVE-2022-1125, CVE-2022-1127, CVE-2022-1128, CVE-2022-1129, CVE-2022-1130, CVE-2022-1131, CVE-2022-1132, CVE-2022-1133, CVE-2022-1134

Google has released Chrome 100.0.4896.60 for Windows, Mac and Linux with fixes for multiple High risk vulnerabilities. In addition, Google also issued security updates for Chrome for iOS, Chrome for Android and Chrome OS.

An attacker could exploit these vulnerabilities to take control of impacted systems.

The latest Chrome 100 security update (100.0.4896.60) patched 28 vulnerabilities in all, to include 9 High severity vulnerabilities, each discovered by external researchers:

  1. CVE-2022-1125: Use after free in Portals.
  2. CVE-2022-1127: Use after free in QR Code Generator.
  3. CVE-2022-1128: Inappropriate implementation in Web Share API.
  4. CVE-2022-1129: Inappropriate implementation in Full Screen Mode.
  5. CVE-2022-1130: Insufficient validation of untrusted input in WebOTP.
  6. CVE-2022-1131: Use after free in Cast UI.
  7. CVE-2022-1132: Inappropriate implementation in Virtual Keyboard.
  8. CVE-2022-1133: Use after free in WebRTC.
  9. CVE-2022-1134: Type Confusion in V8.

In addition, Google also addressed 10 Medium and 1 Low severity vulnerabilities also found by researchers.

Finally, Google also released Chrome 100 (100.0.4896.58) for Android, Chrome 100 (100.0.4896.56) for iOS and Chrome OS 99.0.4844.94 (Platform version: 14469.59.0) for most Chrome OS devices