Chrome is available for Windows, Mac OS X, and Linux. Get a Zero-Day Exploit Security Fix
READ HIGHLIGHTS
The zero-day vulnerability patch is included in Chrome 98.0.4758.102.
Google was notified of the flaw earlier this month
Chrome users may update by going to the About Google Chrome area.
WHY IN NEWS
Google has published a new Browser version for Windows, Mac OS X, and Linux that addresses 11 security vulnerabilities. The update addresses a particularly serious zero-day flaw which has already been abused by hackers. Chrome's Animation component has a vulnerability known as a 'use-after-free' bug. An attacker might leverage the flaw to alter data or even run code on the machine without informing the users. This is the first zero-day issue that has been fixed by Google for the Chrome browser. Google released a new version of Firefox edition 98.0.4758.102 for Windows, macOS, and Linux in a short blog post, and it will begin rolling out to users across the world in the coming days.
ALSO READ : Twitter expands the number of people who may test the Safety Mode feature.
The zero-day problem has been designated as CVE-2022-0609, and it is one of the solutions included in the newest version. According to the blog post, Google's Threat Analysis Group reported it on February 10. 'Google is aware of claims that a CVE-2022-0609 vulnerability has been discovered in the wild,' the firm added. Users are encouraged to update Chrome on their computers immediately due to the high severity of the problem. Although Chrome automatically checks for new updates, you may manually check for the most recent version by navigating to Chrome > About Google Chrome. You can also check for updates by going to Help > About Google Chrome and then clicking the three-dot button in the right-most area.
ALSO READ : Customers may now listen to voice messages , different chats on WhatsApp for iOS.
In addition to the zero-day flaw, Chrome version 98.0.4758.102 addresses four other high-severity 'use-after-free' security flaws discovered in the browser's Fire Manager, Webstore API, ANGLE, and GPU process. Another high-severity flaw in Tab Groups was fixed by the update, which was caused by a 'heap buffer overflow' issue. According to the facts publicly published by Google, the new version also includes a workaround for a medium-severity problem that emerged owing to an incorrect implementation in the Gamepad API. This isn't the first time Chrome has been revealed to have a zero-day vulnerability. Through several security upgrades last year, Google corrected a total of 16 zero-day issues in the browser. Because zero-day defects are identified before security experts and software manufacturers are aware of their existence, they can be extremely dangerous to the general public. Cybercriminals and attackers can take advantage of these flaws before they become widely known, gaining access to user data and systems.