Google fixes several high severity vulnerabilities in its Chrome 101.0.4951.41 Stable Channel update
Hello everyone,
Chrome stable channel has been updated to 101.0.4951.41 for Windows, Mac, and Linux. This update comes with 30 security fixes. The details of the vulnerability fixed are mentioned below:
CVE ID | Vulnerability | Severity |
CVE-2022-1477 | Use after free in Vulkan | High |
CVE-2022-1478 | Use after free in SwiftShader | High |
CVE-2022-1479 | Use after free in ANGLE | High |
CVE-2022-1480 | Use after free in Device API | High |
CVE-2022-1481 | Use after free in Sharing | High |
CVE-2022-1482 | Inappropriate implementation in WebGL | High |
CVE-2022-1483 | Heap buffer overflow in WebGPU | High |
CVE-2022-1484 | Heap buffer overflow in Web UI Settings | Medium |
CVE-2022-1485 | Use after free in File System API | Medium |
CVE-2022-1486 | Type Confusion in V8 | Medium |
CVE-2022-1487 | Use after free in Ozone | Medium |
CVE-2022-1488 | Inappropriate implementation in Extensions API | Medium |
CVE-2022-1489 | Out of bounds memory access in UI Shelf | Medium |
CVE-2022-1490 | Use after free in Browser Switcher | Medium |
CVE-2022-1491 | Use after free in Bookmarks | Medium |
CVE-2022-1492 | Insufficient data validation in Blink Editing | Medium |
CVE-2022-1493 | Use after free in Dev Tools | Medium |
CVE-2022-1494 | Insufficient data validation in Trusted Types | Medium |
CVE-2022-1495 | Incorrect security UI in Downloads | Medium |
CVE-2022-1496 | Use after free in File Manager | Medium |
CVE-2022-1497 | Inappropriate implementation in Input | Medium |
CVE-2022-1498 | Inappropriate implementation in HTML Parser | Low |
CVE-2022-1499 | Inappropriate implementation in WebAuthentication | Low |
CVE-2022-1500 | Insufficient data validation in Dev Tools | Low |
CVE-2022-1501 | Inappropriate implementation in iframe | Low |
To install this update on your Windows / Mac machines, initiate a sync between the Central Patch Repository and the Desktop Central / Patch Manager Plus / Vulnerability Manager Plus server. Once the sync is complete, search for the following Patch IDs or Bulletin ID and deploy them to your target systems.
Patch ID | Bulletin ID | Patch Description |
324647 | TU-017 | Google Chrome (x64) (101.0.4951.41) |
324646 | TU-017 | Google Chrome (101.0.4951.41) |
603790 | MAC-012 | Google Chrome for Mac (101.0.4951.41) |
Cheers,
The ManageEngine Team