Google Chrome fixes browser engine flaws
The latest version of Google Chrome needs to be patched to close two security holes, with one described as high risk.
Google has released a security patch for its Chrome 2 browser, which closes two flaws in WebKit the open source browser engine Chrome is built around.
The first fix is for a WebKit memory corruption issue that Google has rated as highly severe. A user visiting a malicious website could have lead to a tab crash or a hacker running code in the Google Chrome sandbox.
The second fix is rated as medium in severity, and is for a WebKit drag and drop information leak, which could lead to the disclosure of sensitive information when content was dragged over a malicious web page.
In May, Google released Chrome 2. It claimed that this version was much faster and more stable.
Chrome's versions of WebKit and its JavaScript engine were also updated to make the pages run faster.
Microsoft also recently patched up different versions of Internet Explorer, while Apple released Safari 4.0 out of beta.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
-
Satya Nadella touts in-house models to cut spiralling AI costsNews The Microsoft chief says pricey frontier models don't have to be used for every task, and its own in-house MAI models could be the key to reducing costs.
-
Barracuda expands partner program with new enablement toolsNews The cybersecurity vendor has launched new training, demand generation, and partner engagement resources to fuel channel partner growth
-
Apple is speeding up software patching due to AI security concerns – here’s what you need to knowNews Apple is speeding up its software patching processes amid rising concerns that AI is helping hackers to spot and exploit flaws at a far quicker pace.
-
Microsoft defends “negligent” security approach that prolonged vulnerability fix for five monthsNews The tech giant has refuted claims that its practices have left customers “in the dark”
-
Ubuntu shifts to four-week update cycleNews Critical fixes will also come every two weeks, mitigating the issues involved with releasing prompt patches on the old three-week cadence
-
Microsoft angers admins as April Patch Tuesday delivers password feature without migration guidanceNews Security fixes include a zero day exploited by a ransomware group and seven critical flaws
-
Spanish spyware outfit uncovered, develops exploits for Windows, Chrome, and FirefoxNews Google was only able to discover the company after an anonymous submission was made to its Chrome bug reporting programme
-
Google adds new security vendor plugins for Chrome, improved Chrome OS policy controls for IT adminsNews New integrations across various security pillars aim to improve Chrome OS and Chrome browser security for enterprise customers
-
Google patches second Chrome browser zero-day of 2022News Google acted quickly to secure against the type confusion vulnerability that was under active exploitation
-

Acer Chromebook Spin 513 review: Cheap and mostly cheerfulReviews An affordable Chromebook convertible with good looks but mediocre performance