$7,000 was awarded to Chaoyuan Peng for the low-rated use after free vulnerability CVE-2022-2163 in cast user interface and toolbar.Earlier today one of my clients contacted me because he couldn’t access via the Edge browser to check his webmail.The first is a use after free in the service worker API and the second a use after free in views. Two further high-rated vulnerabilities, CVE-2022-2480 and CVE-2022-2481, from Sergei Glazunov (a member of the Google Project Zero team) and YoungJoo Lee respectively, have yet to have any bounty awarded.$3,000 was awarded to an anonymous researcher for a high-rated vulnerability CVE-2022-2479 involving insufficient validation of untrusted input in files.$7,500] was awarded to 'triplepwns' for a high-rated use after free vulnerability CVE-2022-2478 in PDF.

$16,000 was awarded to an anonymous researcher for a high-rated use after free vulnerability CVE-2022-2477 in guest view.Google sensibly withholds this until such a time as a majority of the userbase has had the opportunity to update. MORE FROM FORBES New 0Day Hack Attack Alert Issued For All Windows Users By Davey Winder The named Chrome vulnerabilitiesĪs usual, there is little detailed information available currently.

Some $23,000 of this went to just two researchers, one of which, surprisingly, was for that low-impact vulnerability. In total, $33,500 in bug bounties was awarded to the researchers who disclosed the vulnerabilities. Check the version number to ensure Google Chrome is secure Davey Winderįive of the six vulnerabilities are rated as high impact, with the sixth being a low impact issue.

Avast blocking sites chrome mac