# MA-539.122015: MyCERT Advisory - Google Releases Security Update for Chrome

**Date:** 04 Dec 2015  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-539.122015  
**Advisory ID:** MA-539.122015

---

#### **1.0 Introduction**
Google has released Chrome version 47.0.2526.73 to address multiple vulnerabilities for Windows, Mac, and Linux. Exploitation of one of these vulnerabilities may allow a remote attacker to obtain sensitive information from an affected system. Users and administrators are advised to apply the necessary update.
**2.0 Affected Products**
Listed below are the affected products:
- Google Chrome for Windows, Mac and Linux.
**3.0 Impact**
This update which includes 41 security fixes to address vulnerabilities. Table 1 below listed the some of the security fixes:
|  |
| --- | --- | --- | **CVE** | **Issue** | **Severity** | CVE-2015-6765 | Use-after-free in AppCache | Critical | CVE-2015-6766 | Use-after-free in AppCache | High | CVE-2015-6767 | Use-after-free in AppCache | High | CVE-2015-6768 | Cross-origin bypass in DOM | High | CVE-2015-6769 | Cross-origin bypass in core | High | CVE-2015-6770 | Cross-origin bypass in DOM | High | CVE-2015-6771 | Out of bounds access in v8 | High | CVE-2015-6772 | Cross-origin bypass in DOM | High | CVE-2015-6764 | Out of bounds access in v8 | High | CVE-2015-6773 | Out of bounds access in Skia | High | CVE-2015-6774 | Use-after-free in Extensions | High | CVE-2015-6775 | Type confusion in PDFium | High | CVE-2015-6776 | Out of bounds access in PDFium | High | CVE-2015-6777 | Use-after-free in DOM | High | CVE-2015-6778 | Out of bounds access in PDFium | Medium | CVE-2015-6779 | Scheme bypass in PDFium | Medium | CVE-2015-6780 | Use-after-free in Infobars | Medium | CVE-2015-6781 | Integer overflow in Sfntly | Medium | CVE-2015-6782 | Content spoofing in Omnibox | Medium | CVE-2015-6783 | Signature validation issue in Android Crazy Linker | Medium | CVE-2015-6784 | Escaping issue in saved pages | Low | CVE-2015-6785 | Wildcard matching issue in CSP | Low | CVE-2015-6786 | Scheme bypass in CSP | Low |
**4.0 Recommendations**
Users are recommended to upgrade to Google Chrome 47.0.2526.73. The latest Google Chrome can be downloaded from this URL:
- Windows users: <https://www.google.com/chrome/browser/?platform=win>
- Linux users: <https://www.google.com/chrome/browser/?platform=linux>
- Mac users: <https://www.google.com/chrome/browser/?platform=mac>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#bad9c3d8dfc8838383fad9c3d8dfc8c9dfd9cfc8d3cec394d7c3) or [[email protected]](/cdn-cgi/l/email-protection#ee83978d8b9c9aae83978d8b9c9ac0819c89c08397) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax: +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS: CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours: Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2015/12/01/Google-Releases-Security-Update-Chrome>
- <http://googlechromereleases.blogspot.my/2015/12/stable-channel-update.html>