Google ships 8th emergency Chrome update for Mac to fix ‘high-severity’ flaw

For the eighth time this year, Google has released an emergency update to Chrome for Mac that fixes a serious security flaw that has been exploited in the wild. All users should immediately update to version 107.0.5304.121.

The update contains a unique fix for a heap buffer overflow on GPUs. The CVE program tracks the vulnerability, which was reported by Clement Lecigne of Google’s Threat Analysis Group on November 22, as CVE-2022-4135. As Bleeping Computer explains, heap buffer overflow “is a memory vulnerability that causes data to be written to forbidden (usually adjacent) locations without verification.”

Google pre-patched Chrome for Mac in late October and shipped numerous updates to fix high-severity zero-days this year:

The update is rolling out for Mac users, but you can get it manually by going to preferences > about chrome > Search for updates. then click Relaunch to install the update.