Google releases Chrome 95 security update (95.0.4638.54) with fixes for 5 High risk vulnerabilities

Google has released Chrome 95 security update (95.0.4638.54) for Windows, Mac and Linux with fixes for multiple vulnerabilities.

An attacker could exploit these vulnerabilities to take control of impacted systems.

The Chrome security update patched 19 vulnerabilities in all, to include the following 5 High severity vulnerabilities, each discovered by external researchers:

1. CVE-2021-37981: Heap buffer overflow in Skia.
2. CVE-2021-37982: Use after free in Incognito.
3. CVE-2021-37983: Use after free in Dev Tools.
4. CVE-2021-37984: Heap buffer overflow in PDFium.
5. CVE-2021-37985: Use after free in V8.

In addition, none of these vulnerabilities had known exploits in the wild as noted in this Chrome advisory.

Google also released Chrome 95 (95.0.4638.50) for Android on October 19, 2021 and Chrome OS update 94.0.4606.104 (Platform version: 14150.64.0)

Related Articles

• Microsoft October 2021 Security Updates includes fixes for 4 zero-days, 1 actively exploited
• Google releases Chrome 94 security update (94.0.4606.81) with fixes for 4 High risk vulnerabilities
• Google patches 2 Chrome 94 zero-day vulnerabilities exploited in the wild
• Google Chrome 94 security update fixes zero-day vulnerability (CVE-2021-37973) under attack