Google last week patched nine vulnerabilities in Chrome and boosted the speed and reach of the browser’s hardware acceleration with the launch of version 18.
According to the company, Chrome 18 enables accelerated Canvas 2D on Windows and Mac machines with compatible graphics processor units (GPUs), and expands support for the WebGL 3D standard to older systems.
Chrome 18 also included the new Adobe Flash Player 11.2, which featured patches for two critical vulnerabilities in the popular media software. Chrome is the only browser to bundle Flash Player.
Flash Player 11.2′s most prominent feature — a new background update mechanism for Windows PCs — is not applicable to the version integrated with Chrome, since the browser uses its own silent update service to deliver fixes for the oft-exploited and -repaired plug-in.
Per its usual practice, Google blocked access to its bug tracking database for the just-patched vulnerabilities to prevent outsiders from gleaning information that could be used to build exploits.
Three of the nine vulnerabilities patched today were rated “high,” the second-most dire ranking in Google’s threat system. Five were marked “medium” and one was tagged “low.”
Google paid $4000 in bounties to six researchers for reporting the same number of bugs, and handed another $8,000 to four investigators who uncovered flaws that were patched by Google engineers before Chrome 18 made it to its final milestone. The three remaining vulnerabilities in the nine were uncovered by Google’s own security team.