Google has announced the release of new Chrome versions (130.0.6723.58/59 for Windows and macOS, and 130.0.6723.58 for Linux) that address 17 security vulnerabilities. Thankfully, none of these vulnerabilities have been reported as exploited, offering some peace of mind to users. As usual, manufacturers of other Chromium-based browsers are expected to issue updates shortly to keep users safe.
In the Chrome release blog, security researcher Daniel Yip outlined 13 of the 17 vulnerabilities fixed in this update. One vulnerability was classified as high risk—a use-after-free vulnerability in the AI module (CVE-2024-9954)—while others were deemed medium or low risk. Google maintains its policy of not disclosing details about vulnerabilities found internally, emphasizing the collaboration with external security researchers.
Key Features in Chrome 130
In addition to fixing vulnerabilities, the latest release brings several enhancements to the user experience. A notable addition is the integrated password manager, allowing users to easily utilize passkeys across all devices. Furthermore, the security check feature now operates automatically in the background, providing enhanced protection. Chrome also introduces AI-based, real-time protection against phishing and malware threats, and users can confirm whether Advanced Safe Browsing is enabled through the settings menu under Privacy and Security.
The Ripple Effect on Other Chromium-based Browsers
With Chrome 130 now available, other Chromium-based browsers are expected to update promptly. Currently, browsers like Brave, Microsoft Edge, Vivaldi, and Opera have not yet transitioned to Chromium 130 but remain at last week’s security level. Opera, in particular, is working on finalizing version 115, which will utilize Chromium 130 but is still undergoing beta testing.
In conclusion, Google’s proactive approach to enhancing browser security, combined with new features, demonstrates its commitment to safeguarding users. As other manufacturers catch up with these updates, it’s crucial for users to keep their browsers current to fend off potential security threats.