Google has released a major security update for Chrome, fixing 433 vulnerabilities, several of which are rated critical. Users are urged to install the update and restart their browsers immediately to protect against potential exploits.
Critical Vulnerabilities Addressed
The update, Chrome version 150.0.7871.46 for Linux and 150.0.7871.46/.47 for Windows and Mac, addresses flaws that could allow attackers to escape the browser's sandbox. According to the security team at Malwarebytes, "Google rates them as Critical severity because they could allow an attacker to run arbitrary code outside the browser’s sandbox, which makes it the highest tier on its rating scale." Such sandbox escape vulnerabilities can compromise the entire device and system.
No Zero-Day Exploits Reported
None of the vulnerabilities have been assigned a zero-day rating, meaning there is no evidence of active exploitation in the wild. However, Google has not disclosed full details of the bugs, stating that "access to bug details and links may be kept restricted until a majority of users are updated with a fix."
How to Update Chrome
To update, click the three-dot menu at the top right of the browser, go to Settings, then About Chrome. The browser will automatically check for updates. If version 150.0.7871.46 (Linux) or 150.0.7871.46/.47 (Windows/Mac) is not displayed, a restart is required to complete the update. Google confirmed the rollout will proceed over the coming days and weeks, but users are advised to update manually without delay.
Impact of Sandbox Escape
Sandbox escape vulnerabilities are particularly dangerous because they allow attackers to bypass the browser's security boundaries and execute code on the underlying operating system. This can lead to data theft, malware installation, or full system compromise. The update is essential for all Chrome users on Windows, Mac, and Linux.
