Update to Chrome 106 fixes 20 gaps

Frank Zieman

This week, Google updated its web browser to the 106 generation with Chrome 106.0.5249.61/62 for Windows (106.0.5249.61 for macOS and Linux). In the new main version, the developers have eliminated 20 vulnerabilities. Chrome gets its own certificate store.

In the Chrome Release Blog, Srinivas Sista lists the 16 of the 20 fixed vulnerabilities that were discovered by external researchers and reported to Google. Google classifies five of these vulnerabilities as high risk. Eight gaps are considered medium and three are considered low risk. Many are use-after-free vulnerabilities in various browser components, such as CSS, Survey, or Media.

So far, Google has awarded the outside researchers $38,500 in awards. As always, Google has not published any details about the internally found security gaps. As a rule, Chrome updates itself automatically when a new version is available. With ”

≡ Help » About Google Chrome

‘ you can trigger the update check manually.

Chrome gets its own certificate store

Google wants to make Chrome independent of third-party certificate stores and has given its browser its own “Chrome Root Store”. This new function will gradually be activated with a growing number of users. Google started doing this with Chrome 105 for some Windows and Mac users. Over the next few weeks and months, more and more users will receive the new certificate store, mostly without noticing it.

▶The latest security updates

Other Chromium-based browsers

The manufacturers of other Chromium-based browsers are now being asked to follow suit with appropriate updates. Brave released an update on the same day as Google. However, Brave 1.44.101 is already based on the slightly newer Chromium version 106.0.5249.65. Microsoft (Edge), Vivaldi and Opera are not ready yet.

Google has also released Chrome 106.0.5249.65 for Android and Chrome 106.0.5249.70 for iOS. Google will release Chrome 107 on October 25th.

Chromium-based browsers at a glance: