Google released Chrome 101. In this release, Google fixed 28 security issues and added additional features. The new features include:
Removing setTimeout(,0) clamping to 1ms
Deprecation Origin Trial for UA reduction
Chrome Browser Cloud Management maintains compatibility with the most recent 12 versions of Chrome
Chrome supports notification permission changes on Android 13 and above
Chrome removes support for WebSQL in a third-party context
Compare search results with new Side Search feature
Control camera and microphone permissions in on iOS
Chrome runs prerendering autocomplete suggestions from the Omnibox
Chrome removes legacy policies with non-inclusive names
New and updated policies in Chrome browser
Details on all of these features can be found on the Chrome Status page. As always, Google takes its time with putting our a larger blog post covering the most important changes however, you can find a very brief summary on the Chrome release page.
Regarding security, Google fixed the following vulnerabilities disclosed by external researchers:
High CVE-2022-1477: Use after free in Vulkan.
High CVE-2022-1478: Use after free in SwiftShader.
High CVE-2022-1479: Use after free in ANGLE.
High CVE-2022-1480: Use after free in Device API.
High CVE-2022-1481: Use after free in Sharing.
High CVE-2022-1482: Inappropriate implementation in WebGL.
High CVE-2022-1483: Heap buffer overflow in WebGPU.
Medium CVE-2022-1484: Heap buffer overflow in Web UI Settings.
Medium CVE-2022-1485: Use after free in File System API.
Medium CVE-2022-1486: Type Confusion in V8.
Medium CVE-2022-1487: Use after free in Ozone.
Medium CVE-2022-1488: Inappropriate implementation in Extensions API.
Medium CVE-2022-1489: Out of bounds memory access in UI Shelf.
Medium CVE-2022-1490: Use after free in Browser Switcher.
Medium CVE-2022-1491: Use after free in Bookmarks.
Medium CVE-2022-1492: Insufficient data validation in Blink Editing.
Medium CVE-2022-1493: Use after free in Dev Tools.
Medium CVE-2022-1494: Insufficient data validation in Trusted Types.
Medium CVE-2022-1495: Incorrect security UI in Downloads.
Medium CVE-2022-1496: Use after free in File Manager.
Medium CVE-2022-1497: Inappropriate implementation in Input.
Low CVE-2022-1498: Inappropriate implementation in HTML Parser.
Low CVE-2022-1499: Inappropriate implementation in WebAuthentication.
Low CVE-2022-1500: Insufficient data validation in Dev Tools.
Low CVE-2022-1501: Inappropriate implementation in iframe.
With the report below, you can easily find which computers in your network do not have this latest Chrome version installed. Simply run the report to get a complete overview of your environment.
Run our Chrome 101 Query
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 101 Then
'Up to date'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 101 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 4951 Then
'Up to date'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 101 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 4951 And
Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 41 Then
'Up to date'
Else 'Out of date'
End As [Patch Status],
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftware.Lastchanged,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 101 Then
'#d4f4be'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 101 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 4951 Then
'#d4f4be'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 101 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 4951 And
Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 41 Then
'#d4f4be'
Else '#ffadad'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%Google Chrome%' And
tblSoftwareUni.SoftwarePublisher Like '%Google%' And tblState.Statename =
'Active'
