Google releases a critical security update for Chrome that fixes a 0-day vulnerability

[ad_1]

Google has released a new security update for its Chrome web browser which is fixing several security vulnerabilities in the browser. One of the security vulnerabilities is exploited in the wild, another has received the highest severity rating of critical.

The update is rolled out to all Chrome installations worldwide. It may take some time, days or even weeks, for updates to become available via the Chrome Browser auto-update feature.

Desktop users can run manual checks for updates to instantly secure browser installations.

Select Menu> Help> About Google Chrome or load chrome: // settings / help to open the update page. Chrome displays the installed version, checks for updates, and will download and install any new browser versions it finds.

The fully updated desktop version is 96.0.4664.110. Android users cannot force a manual browser control on their devices, as this is handled exclusively by Google Play.

Vulnerabilities

Google lists five vulnerabilities addressed by the Chrome update on the official releases blog:

[$NA][1263457] Critical CVE-2021-4098: Insufficient data validation in Mojo. Reported by Sergei Glazunov of Google Project Zero on 2021-10-26[$5000][1270658] High CVE-2021-4099: use after free in Swiftshader. Reported by Aki Helin di Solita on 2021-11-16[$5000][1272068] CVE-2021-4100 high: object life cycle issue in ANGLE. Reported by Aki Helin di Solita on 2021-11-19[$TBD][1262080] CVE-2021-4101 high: Heap buffer overflow in Swiftshader. Reported by Abraruddin Khan and Omair on 2021-10-21[$TBD][1278387] CVE-2021-4102 high: use after free in V8. Reported by Anonymous on 2021-12-09

The vulnerability with ID CVE-2021-4102 is exploited in the wild according to Google. The security issue exploits a user for free in Chrome’s V8 JavaScript engine. Use after free vulnerabilities can often be exploited to execute arbitrary code on target computers. The extent of the attacks exploiting the vulnerability was not disclosed by Google.

Chrome users are advised to update their browsers as soon as possible to protect them from potential attacks.

Google released a security update for Chrome 96 just last week. The company fixed 16 zero-day vulnerabilities in Chrome in 2021. Other Chromium-based browser manufacturers may also release security updates for their products to address these issues.

Now You: When do you update your browsers and other programs?

Summary

Item name

Google releases a critical security update for Chrome that fixes a 0-day vulnerability

Description

Google has released a new security update for its Chrome web browser which is fixing several security vulnerabilities in the browser. One of the security vulnerabilities is exploited in the wild, another has received the highest severity rating of critical.

Author

Martin Brinkmann

publisher

Ghacks Technology News

Logo

Advertisement

[ad_2]