Google Chrome 149 Update Fixes Over 400 Security Vulnerabilities

Must read

- Advertisement -

Google has released Chrome 149 for Windows, macOS, and Linux, bringing important security improvements and a handful of new features. The latest update patches more than 400 vulnerabilities, including several classified as critical.

According to Google, none of the vulnerabilities fixed in this release have been actively exploited in real-world attacks so far.

Chrome 149 Introduces New PDF Editing Features

One of the biggest user-facing additions in Chrome 149 is the expansion of its built-in PDF tools.

Users can now do more than simply view and fill PDF forms. The browser now supports PDF annotations and digital signatures directly within the integrated PDF viewer.

- Advertisement -

This update moves Chrome closer to becoming a lightweight PDF editor, a feature that competing browsers such as Mozilla Firefox have offered for some time.

As a result, users can handle common PDF tasks without relying on third-party software.

Some Expected Features Are Still Missing

Google had previously announced plans to introduce vertical tabs and an enhanced Reading Mode.

The vertical tabs feature would allow users to arrange tabs in a side panel rather than across the top of the browser. Meanwhile, the redesigned Reading Mode is expected to use the entire browser window for a more immersive reading experience.

However, these features are not yet widely available in Chrome 149. Google often rolls out new capabilities gradually, meaning some users may receive them later than others.

Chrome 149 Available Across Multiple Platforms

The latest Chrome versions include:

  • Chrome 149.0.7827.53/54 for Windows
  • Chrome 149.0.7827.53 for macOS
  • Chrome 149.0.7827.53 for Linux
  • Chrome 149.0.7827.59 for Android
  • Chrome 149.0.7827.45 for iOS

The Android version includes the same security fixes found in the desktop release.

Users can manually check for updates by navigating to:

Help → About Google Chrome

or

Settings → About Google Chrome

Chrome typically updates automatically in the background when a new version becomes available.

More Than 400 Security Vulnerabilities Fixed

The biggest focus of Chrome 149 is security.

Google confirmed that the update addresses a total of 429 security vulnerabilities, making it one of the largest security updates in the browser’s history.

The company noted that advanced AI-powered security tools, including Google’s Big Sleep project, helped identify a significant number of the vulnerabilities.

Of the 429 issues fixed:

  • 22 are classified as critical
  • 87 are classified as high risk
  • 226 are classified as medium risk
  • 94 are classified as low risk

Google discovered 371 vulnerabilities internally, while independent security researchers reported the remaining issues.

The company has awarded approximately $209,000 in bug bounty payments to external researchers who helped identify the flaws.

Critical Vulnerabilities Primarily Involve Memory Errors

Many of the most serious vulnerabilities involve use-after-free (UAF) memory errors.

These flaws occur when software continues using memory after it has already been released, potentially allowing attackers to execute malicious code.

Among the 22 critical vulnerabilities, most were linked to:

  • WebGL library Angle
  • Browser rendering components
  • Media processing systems

Security experts consider UAF vulnerabilities especially dangerous because they can often be exploited to gain control over affected systems.

Most Affected Components

The update addresses vulnerabilities across several browser components.

The areas with the highest number of fixes include:

ComponentVulnerabilities Fixed
Angle (WebGL Library)37
Browser Extensions Interface18
Media Handling18
Media Handling and Codecs Combined28

The most common vulnerability categories include:

  • 110 use-after-free flaws
  • 88 insufficient input validation issues
  • 60 implementation-related errors

These fixes significantly strengthen Chrome’s overall security posture.

Chrome 150 Expected Later This Month

Google is expected to release Chrome 150 by the end of June.

The next version may include additional user interface enhancements and broader availability of features that are currently rolling out gradually.

For now, security experts recommend updating to Chrome 149 as soon as possible to benefit from the latest protections.

- Advertisement -

More articles

Latest article