Chrome 148 patches WebRTC and UI flaws letting attackers run code

Google has released critical updates for its Chrome browser, addressing two high-severity vulnerabilities that could allow attackers to execute code remotely simply by visiting a compromised website. Users are encouraged to update their browsers to version 148.0.7778.178/179 for Windows and Mac, and 148.0.7778.178 for Linux as the update will be rolled out gradually over several weeks. The vulnerabilities include a use-after-free issue in WebRTC affecting Linux users and a UI spoofing vulnerability on Windows.

Users can update manually through settings. While these updates improve security, the update does not address the recently disclosed "Browser Fetch" flaw.