Researchers have identified a critical Windows kernel memory corruption flaw

Sep 26, 2012 12:51 GMT  ·  By

Google has released Chrome 22 and besides the usual feature improvements, the new variant also comes with over 40 security fixes.

The large number of vulnerabilities means that there have been large rewards given on this occasion. In fact, Google broke its previous record of $26,500 (21,000 EUR) and handed out a whopping $29,500 (24,000 EUR).

The list of researchers rewarded for their findings includes Sergey Glazunov, Chamal de Silva, Atte Kettunen of OUSPG, miaubiz, Sławomir Błażek, Nir Moshe, and pawlkt.

Eetu Luodemaa and Joni Vähämäki from Documill were awarded $5,000 (4,000 EUR) for identifying a critical Windows kernel memory corruption vulnerability.

Other high-severity security holes included an UXSS in frame handling, UXSS in v8 bindings, a DOM tree corruption with plugins, an out-of-bounds write in Skia, a buffer overflow issue in SSE2 optimizations, and use after free bugs in onclick handling and SVG text references.

Google Chrome for Windows is available for download here Google Chrome for Mac is available for download here Google Chrome for Linux is available for download here