Google Chrome 157 fixes 213 flaws, including seven critical bugs

Google has rolled out Chrome 157 to the stable channel, addressing a total of 213 vulnerabilities, with seven rated critical memory-safety flaws. The release notes identify a buffer overflow in Dawn, the open source WebGPU implementation, as the top critical issue and note a memory corruption flaw in ANGLE, the graphics engine abstraction layer, among the critical defects.

The Dawn flaw earned the reporting researcher a £8,000 prize (reported as $10,000 in the piece) and ANGLE’s memory corruption bug carried a $1,000 reward; the remaining five critical flaws (four use-after-free and one additional buffer overflow) were disclosed by Google and researchers with contributions from Anthropic’s Xinyang Ge and Wenbin Liu, though no rewards are listed for those five in the article.

Google states that 77 high‑severity vulnerabilities were fixed in Chrome 157, including more than a dozen reported by external researchers, with explicit pay-outs noted for at least two of them (£7,800 and £1,600 equivalents cited in the article).

According to Google’s advisory, Chrome 157.0.8103.38/39 for Windows and macOS, and 157.0.8103.38 for Linux, also fixes numerous other issues and notes that Google paid out a total of $31,000 in rewards to reporting researchers, while bug-bounty payment decisions for 39 further flaws remained unresolved at the time of reporting. The article states there is no indication that any of the defects were exploited in the wild, but users are urged to update promptly. The report attributes these findings to Google’s advisory and to the named researchers and organisations who reported the flaws.