Google Chrome released a new security update for Windows, Linux & Mac users and an update for a new high severity Zero-day bug that is being actively exploited wild by unknown threat actors.
Chrome 104 was released with the fixes of 11 security vulnerabilities, including one critical severity bug and six high severity bugs reported by the Google Project Zero Team and external security researchers.
A Critical Use after free bug(CVE-2022-2852) Reported by Sergei Glazunov of Google Project Zero in Federated Credential Management API (FedCM) Let hackers allow take over the system remotely.
A high severity Zero-day bug CVE-2022-2856 allows Insufficient validation of untrusted input in Intents that was reported by Ashley Shen and Christian Resell of Google Threat Analysis Group has exploited wild.
This is the 5th Zero-day Bug that was uncovered this year, Chrome users are urged to update their browsers immediately.
CVE-2022-2852: Use after free in FedCM – Critical
CVE-2022-2854: Use after free in SwiftShader – High
CVE-2022-2855: Use after free in ANGLE – High
CVE-2022-2857: Use after free in Blink – High
CVE-2022-2858: Use after free in Sign-In Flow – High
CVE-2022-2853: Heap buffer overflow in Downloads – High
CVE-2022-2856: Insufficient validation of untrusted input in Intents – High (Exploited Wild)
CVE-2022-2859: Use after free in Chrome OS Shell – Medium
CVE-2022-2860: Insufficient policy enforcement in Cookies -Medium
CVE-2022-2861: Inappropriate implementation in Extensions API – Medium
According to the Google release report “The Stable channel has been updated to 104.0.5112.101 for Mac and Linux and 104.0.5112.102/101 for Windows which will roll out over the coming days/weeks. The extended stable channel has been updated to 104.0.5112.101 for Mac and 104.0.5112.102 for Windows, which will roll out over the coming days/weeks”
To upgrade your old Chrome, then you have to follow a few simple steps that we have mentioned below:-
Also Read: Download Free Secure Web Filtering – E-book
Microsoft has removed two widely-used Visual Studio Code (VS Code) extensions, “Material Theme Free” and…
A new ransomware group, dubbed Anubis, has emerged as a significant threat in the cybersecurity…
A new wave of cyberattacks targeting WordPress websites has been uncovered, with attackers leveraging fake…
A newly identified cybercriminal group, LARVA-208, also known as EncryptHub, has successfully infiltrated 618 organizations…
A new wave of sophisticated cyberattacks targeting macOS systems has been identified, involving two malware…
The modern cybersecurity landscape is witnessing an unprecedented surge in sophisticated attack techniques, with adversaries…