Google Releases Chrome 103: Many Gaps Closed

Frank Zieman

Chrome 103.0.5060.53 for Windows, macOS and Linux is the first “stable” release of the new version 103 branch. Chrome 103 is also already available for iOS and Android. In the Chrome Release Blog, Prudhvikumar Bommana lists nine of the 14 fixed vulnerabilities that were discovered by external researchers and reported to Google. There are no 0-day gaps underneath.

Google classifies one of these vulnerabilities (CVE-2022-2156) as critical. This is a use-after-free vulnerability in Base. It was reported by Mark Brand from Google’s Project Zero. Google identifies two of the externally discovered vulnerabilities as high risk. These are a use-after-free vulnerability in interest groups (CVE-2022-2157) and a type confusion in Javascript engine V8 (CVE-2022-2158). Three gaps are considered medium, three more as low risk.

So far, Google has awarded the external researchers $44,000 in awards, including $20,000 for CVE-2022-2157 alone. As always, Google has not published any details about the internally found security gaps. As a rule, Chrome updates itself automatically when a new version is available.

▶The latest security updates

Other Chromium-based browsers

The manufacturers of other Chromium-based browsers are now being asked to follow suit with appropriate updates.

brave

practically simultaneously with Google updated its browser to version 1.40.105, which is already based on Chromium 103.0.5060.53. The Brave developers have also eliminated a number of bugs in it. After all, Microsoft (Edge), Vivaldi and Opera are already at the security level before this update to Chrome 103.

Chrome 103.0.5060.53 for Android and Chrome 103.0.5060.54 for iOS have also been released. Google will release Chrome 104 on August 2nd.

Chromium-based browsers at a glance: