Privacy Ninja

Google Chrome Emergency Update Fixes Zero-day Used in Attacks

Google Chrome Emergency Update Fixes Zero-day Used in Attacks

Google has released Chrome 100.0.4896.127 for Windows, Mac, and Linux, to fix a high-severity zero-day vulnerability actively used by threat actors in attacks.

“Google is aware that an exploit for CVE-2022-1364 exists in the wild,” Google said in a security advisory released today.

While Google states that this Chrome update will roll out over the next few days/weeks, users can receive it immediately by going into the Chrome menu > Help About Google Chrome.

The browser will also automatically check for new updates and install them the next time you close and relaunch Google Chrome.

Also Read: Compliance With Singapore Privacy Obligations; Made Easier!

Google Chrome 100.0.4896.127 update
Google Chrome 98 update

As this bug is actively exploited in attacks, it is strongly advised that you perform a manual check for new updates and relaunch the browser to apply them.

Few details disclosed

The zero-day bug fixed today is tracked as CVE-2022-1364 and is a high severity type confusion weakness in the Chrome V8 JavaScript engine.

While type confusion flaws generally lead to browser crashes following successful exploitation by reading or writing memory out of buffer bounds, attackers can also exploit them to execute arbitrary code.

This vulnerability was discovered by Clément Lecigne from Google’s Threat Analysis Group who reported it to the Google Chrome team yesterday.

Also Read: Got A Notice of Data Breach? Don’t Panic!

While Google said they have detected attacks exploiting this zero-day, it did not provide further details regarding how these attacks are conducted.

“Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Google added.

This is the only vulnerability disclosed in this update, indicating that Chrome 100.0.4896.127 was pushed out as an emergency update to resolve this issue.

Third Chome zero-day fixed this year

With this update, Google has addressed the third Chrome zero-day since the start of 2022.

The previous two vulnerabilities found in 2022 are listed below.

As this zero-day is known to be used in attacks, it is strongly advised to update Google Chrome as soon as possible.

Outsourced Data Protection Officer – It is mandatory to appoint a Data Protection Officer. We help our clients quickly comply with their PDPA & data protection requirements.

Vulnerability Assessment Penetration Testing – Find loopholes in your websites, mobile apps or systems.

Smart Contract Audit – Leverage our industry-leading suite of blockchain security analysis tools, combined with hands-on review from our veteran smart contract auditors.

0 Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

KEEP IN TOUCH

Subscribe to our mailing list to get free tips on Data Protection and Data Privacy updates weekly!

Personal Data Protection

REPORTING DATA BREACH TO PDPC?

We have assisted numerous companies to prepare proper and accurate reports to PDPC to minimise financial penalties.
×

Powered by WhatsApp Chat

× Chat with us