Chrome 130 Launches with Patches for 17 Security Vulnerabilities

Google has released Chrome 130, fixing 17 security vulnerabilities. The update (version 130.0.6723.58/.59 for Windows and Mac, and 130.0.6723.58 for Linux) will be gradually rolled out to users in the coming days and weeks.

The most severe vulnerability is CVE-2024-9954, a high-severity use-after-free flaw in Chrome’s AI component. Reported by researcher DarkNavy, it received a $36,000 bounty.

• Alert
• Hot Topic
• International
• Vulnerabilities

16,000+ Fortinet devices compromised with symlink backdoor, Mostly in Asia

By infosecbulletin / Friday , April 18 2025

According to Shadowserver Foundation around 17,000 Fortinet devices worldwide have been compromised using a new technique called "symlink". This number...

Read More

• Alert
• Vulnerabilities

Patch now! Critical Erlang/OTP SSH Vuln Allows UCE

By infosecbulletin / Friday , April 18 2025

A critical security flaw has been found in the Erlang/Open Telecom Platform (OTP) SSH implementation, allowing an attacker to run...

Read More

• Alert
• Vulnerabilities

CISA warns of increasing risk tied to Oracle legacy Cloud leak

By infosecbulletin / Thursday , April 17 2025

On Wednesday, CISA alerted about increased breach risks due to the earlier compromise of legacy Oracle Cloud servers, emphasizing the...

Read More

• Alert
• Vulnerabilities

CVE-2025-20236
Cisco Patches Unauthenticated RCE Flaw in Webex App

By infosecbulletin / Thursday , April 17 2025

Cisco issued a security advisory about a serious vulnerability in its Webex App that allows unauthenticated remote code execution (RCE)...

Read More

• Alert
• Vulnerabilities

Apple released emergency security updates for 2 zero-day vulns

By infosecbulletin / Thursday , April 17 2025

On Wednesday, Apple released urgent operating system updates to address two security vulnerabilities that had already been exploited in highly...

Read More

• Alert
• Vulnerabilities

Oracle Released Patched for 378 flaws for April 2025

By infosecbulletin / Wednesday , April 16 2025

On April 15, 2025, Oracle released a Critical Patch Update for 378 flaws for its products. The patch update covers...

Read More

• Alert
• Vulnerabilities

CVE-2025-24054
Hackers Exploiting NTLM Spoofing Windows Vuln the in Wild

By infosecbulletin / Wednesday , April 16 2025

Check Point Research warns of the active exploitation of a new vulnerability, CVE-2025-24054, which lets hackers leak NTLMv2-SSP hashes using...

Read More

• Cyber Attack
• Ransomware

Bengaluru firm got ransomware attack, Hacker demanded $70,000

By infosecbulletin / Wednesday , April 16 2025

Bengaluru's Whiteboard Technologies Pvt Ltd was hit by a ransomware attack, with hackers demanding a ransom of up to $70,000...

Read More

• Alert
• Hot Topic

MITRE warns: U.S. Govt. Funding for MITRE’s CVE Ends Today

By infosecbulletin / Wednesday , April 16 2025

MITRE Vice President Yosry Barsoum warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness...

Read More

• Hot Topic
• International

PwC exits more than a dozen countries in push to avoid scandals: FT reports

By infosecbulletin / Wednesday , April 16 2025

PwC has ceased operations in more than a dozen countries that its global bosses have deemed too small, risky or...

Read More

CVE-2024-9954: High severity – Use after free in AI
CVE-2024-9955: Medium severity – Use after free in Web Authentication
CVE-2024-9956: Medium severity – Inappropriate implementation in Web Authentication
CVE-2024-9957: Medium severity – Use after free in UI
CVE-2024-9958: Medium severity – Inappropriate implementation in PictureInPicture
CVE-2024-9959: Medium severity – Use after free in DevTools
CVE-2024-9960: Medium severity – Use after free in Dawn
CVE-2024-9961: Medium severity – Use after free in Parcel Tracking
CVE-2024-9962: Medium severity – Inappropriate implementation in Permissions
CVE-2024-9963: Medium severity – Insufficient data validation in Downloads
CVE-2024-9964: Low severity – Inappropriate implementation in Payments
CVE-2024-9965: Low severity – Insufficient data validation in DevTools
CVE-2024-9966: Low severity – Inappropriate implementation in Navigations

The update fixes several medium-severity vulnerabilities in areas like Web Authentication, UI, PictureInPicture, DevTools, Dawn, and Parcel Tracking. The issues include use-after-free bugs, poor implementations, and inadequate data validation.

Google restricts access to detailed bug information until most users update their browsers. This is to protect users from possible exploitation during the update process.

Chrome users should update their browsers immediately to protect against security flaws. To do this, go to settings, click “About Chrome,” and allow it to check for updates.

This release highlights Google’s dedication to browser security and the crucial role of its bug bounty program in finding and fixing vulnerabilities.

Cyber Resilience: Elevating Bangladesh’s Corporate Culture Safeguard