Software Update: Google Chrome 33.0.1750.149

Google has released an update to version 33 of its Chrome web browser. Google Chrome is available in three versions: stable, beta and dev, and this time the stable version has been updated. In version 33 no new features have been added, but the necessary bug fixes and security updates have been made. Version 33 also marks the end of Google Chrome Frame as it has been retired. The release notes for this release can be found below.

Stable Channel Update

The Stable Channel has been updated to 33.0.1750.149 for Windows, Mac, and Linux. This release also contains a Flash Player Update, to version 12.0.0.77.

Security Fixes and Rewards

This update includes 7 security fixes. Below, we highlight fixes that were either contributed by external researchers or particularly interesting. Please see the Chromium security page for more information.

• [344881] high CVE-2014-1700: Use after free in speech.
• [342618] high CVE-2014-1701: UXSS in events.
• [333058] high CVE-2014-1702: Use after free in web database.

As usual, our ongoing internal security work responsible for a wide range of fixes:

• [338354] High CVE-2014-1703: Potential sandbox escape due to a use-after-free in web sockets.
• [328202, 349079, 345715] CVE-2014-1704: Multiple vulnerabilities in V8 fixed in version 3.23.17.18.

Many of the above bugs were detected using AddressSanitizer. This release fixes a number of crashes and other bugs. A full list of changes is available in the SVN log. If you find a new issue, please let us know by filing a bug.