Google Chrome Stable Channel Hits 22

The Google Chrome browser has been updated to version 22. There’s nothing too exciting about it but there are a multitude of vulnerabilities that have been patched. Google notably payed out for a Critical vulnerability described as “Windows kernel memory corruption”, which warranted a full 5,000 dollar reward.

Another High vulnerability was labeled “UXSS in frame handling” (UXSS stands for Universal Cross Site Scripting). This was submitted by Sergey Glazunov who used another UXSS exploit to break out of Chrome’s sandbox in the pwnium awards.

There are 24 vulnerabilities in total though a few of them consist of many bugs.

Given how quickly Chrome users are updated to the latest version it is unlikely that there will be any exploits in the wild for these vulnerabilities despite their severity. That said, get your Chrome updated so you can be sure.