Chrome 130 Launches with Patches for 17 Security Vulnerabilities

Google has released Chrome 130, fixing 17 security vulnerabilities. The update (version 130.0.6723.58/.59 for Windows and Mac, and 130.0.6723.58 for Linux) will be gradually rolled out to users in the coming days and weeks.

The most severe vulnerability is CVE-2024-9954, a high-severity use-after-free flaw in Chrome’s AI component. Reported by researcher DarkNavy, it received a $36,000 bounty.

• Alert
• Vulnerabilities

Delay patching leaves about 50,000 Fortinet firewalls to zero-day attack

By infosecbulletin / Wednesday , January 22 2025

Fortinet customers must apply the latest updates, as almost 50,000 management interfaces remain vulnerable to the latest zero-day exploit. The...

Read More

• Daily Security Update

Daily Security Update Dated: 21.01.2025

By infosecbulletin / Tuesday , January 21 2025

Every day a lot of cyberattack happen around the world including ransomware, Malware attack, data breaches, website defacement and so...

Read More

• Uncategorized

126 Linux kernel Vulns Allow Attackers Exploit 78 Linux Sub-Systems

By infosecbulletin / Tuesday , January 21 2025

Ubuntu 22.04 LTS users are advised to update their systems right away due to a crucial security patch from Canonical...

Read More

• Uncategorized

CERT-UA alerts about “security audit” requests through AnyDesk

By infosecbulletin / Tuesday , January 21 2025

Attackers are pretending to be Ukraine's Computer Emergency Response Team (CERT-UA) using AnyDesk to access target computers. “Unidentified individuals are...

Read More

• Uncategorized

Oracle Critical Pre-Release update addressed 320 flaw

By infosecbulletin / Tuesday , January 21 2025

Oracle Critical Patch Update Pre-Release Announcement shares details about the upcoming update scheduled for January 21, 2025. Note that this...

Read More

• Hot Topic

OWASP Reveils Top 10 Smart Contract Vulnerabilities for 2025

By infosecbulletin / Tuesday , January 21 2025

OWASP has released its updated list of the top 10 vulnerabilities in smart contracts for 2025. This guide highlights the...

Read More

• Alert
• Vulnerabilities

Multiple Azure DevOps Vulns Allow To Inject CRLF Queries & Rebind DNS

By infosecbulletin / Monday , January 20 2025

Security researchers have found several vulnerabilities in Azure DevOps that could enable attackers to inject CRLF queries and carry out...

Read More

• Uncategorized

Intel holds 22 employees from one Bangladeshi University

By infosecbulletin / Monday , January 20 2025

Intel Corporation is a leading semiconductor chip manufacturer, employing at least 22 graduates from the Department of Applied Chemistry and...

Read More

• Uncategorized

VPN Surge 1500% in USA after TikTok Shut Down

By infosecbulletin / Sunday , January 19 2025

vpnMentor’s Research Team is monitoring the potential TikTok ban in the U.S., driven by national security and data privacy issues....

Read More

• International

MITRE Launches D3FEND 1.0; The Milestone for Cybersecurity Ontology

By infosecbulletin / Saturday , January 18 2025

MITRE launched D3FENDTM 1.0, a cybersecurity framework that provides a vocabulary and understanding of the cyber domain. D3FEND 1.0, funded...

Read More

CVE-2024-9954: High severity – Use after free in AI
CVE-2024-9955: Medium severity – Use after free in Web Authentication
CVE-2024-9956: Medium severity – Inappropriate implementation in Web Authentication
CVE-2024-9957: Medium severity – Use after free in UI
CVE-2024-9958: Medium severity – Inappropriate implementation in PictureInPicture
CVE-2024-9959: Medium severity – Use after free in DevTools
CVE-2024-9960: Medium severity – Use after free in Dawn
CVE-2024-9961: Medium severity – Use after free in Parcel Tracking
CVE-2024-9962: Medium severity – Inappropriate implementation in Permissions
CVE-2024-9963: Medium severity – Insufficient data validation in Downloads
CVE-2024-9964: Low severity – Inappropriate implementation in Payments
CVE-2024-9965: Low severity – Insufficient data validation in DevTools
CVE-2024-9966: Low severity – Inappropriate implementation in Navigations

The update fixes several medium-severity vulnerabilities in areas like Web Authentication, UI, PictureInPicture, DevTools, Dawn, and Parcel Tracking. The issues include use-after-free bugs, poor implementations, and inadequate data validation.

Google restricts access to detailed bug information until most users update their browsers. This is to protect users from possible exploitation during the update process.

Chrome users should update their browsers immediately to protect against security flaws. To do this, go to settings, click “About Chrome,” and allow it to check for updates.

This release highlights Google’s dedication to browser security and the crucial role of its bug bounty program in finding and fixing vulnerabilities.

Cyber Resilience: Elevating Bangladesh’s Corporate Culture Safeguard