Helping to share the web since 1996


Google releases Urgent Update for Google Chrome

Last Friday, the search giant sent out emergency fixes to address a security vulnerability in Google Chrome that it says is being actively exploited.

The issue, attributed to identifier CVE-2022-3075, concerns a case of insufficient data validation in Mojo, which refers to a collection of runtime libraries that provide a platform-agnostic mechanism for inter-process communication (IPC ).

An anonymous researcher has been credited with reporting this high-severity failure on August 30, 2022.

“Google is aware of reports that an exploit exists for CVE-2022-3075,” the internet giant said, without delving into additional details about the nature of the attacks to prevent other threat actors from taking advantage of the flaw.

The latest update becomes the sixth zero-day vulnerability discovered in Google Chrome since the start of the year:

CVE-2022-0609 – Use-after-free in Animation
CVE-2022-1096 – Type Confusion in V8
CVE-2022-1364 – Type Confusion in V8
CVE-2022-2294 – Heap Buffer Overflow in WebRTC
CVE-2022-2856 – Insufficient validation of untrusted input in Intents

 
Google Chrome urgently needs to be updated

Users are recommended to update to version 105.0.5195.102 for Windows, macOS and Linux to mitigate potential threats. Users of Chromium-based browsers such as Microsoft Edge, Brave, Opera and Vivaldi are also advised to apply patches as they become available.

Newer Articles

Older Articles

Back to news headlines