Google just fixed 42 Chrome security flaws. Update now

In the new versions of Chrome 153.0.8010.47/48 for Windows and macOS, and 153.0.8010.47 for Linux, Google has fixed more than 40 security vulnerabilities, some of which are critical. According to Google, none of the patched vulnerabilities have been exploited in attacks yet.

In the Chrome Releases blog post, Srinivas Sista lists 42 vulnerabilities that have been fixed. While Google discovered 26 of the vulnerabilities internally, another 16 were identified by external security researchers. Google has so far awarded them $2,500 in bounties.

Three vulnerabilities are classified as critical, including two use-after-free (UAF) flaws in the Internals and Workers components. A further 28 vulnerabilities are classified as high risk, and the rest are classified as medium risk minus one that’s low risk. Again, the most common type is the use-after-free vulnerability, with 12 instances.

Chrome usually updates automatically when a new version is available. You can manually check for updates via Help → About Google Chrome. Chrome 154 is due to be released as early as next week.

Google has also released Chrome for Android 153.0.8010.47 and Chrome for iOS 154.0.8037.41 this week. The Android version addresses the same vulnerabilities as the desktop versions. The Extended Stable Channel for Windows and macOS now includes Chromium version 152.0.7977.130.

Tip: Whether you keep your browser up to date, you need proper antivirus protections if you want your PC to remain secure and private. Check out our picks for the best antivirus software for Windows as well as best VPN services to stay ahead of security problems.