When you’re procuring on-line for Black Friday at present, do your self a favor and replace Chrome. On Thursday, Google started rolling out a brand new steady channel replace for the Chrome browser on Home windows, Mac, and Linux to patch a zero-day exploit that exists within the wild. In case you haven’t already, verify and ensure your browser is up to date to at the very least model 107.0.5304.121 for Mac and Linux and 107.0.5304.121/.122 for Home windows.
Google’s Prudhvikumar Bommana says on the Chrome Releases weblog that CVE-2022-4135 is a high-severity flaw regarding heap buffer overflow in GPU.
Based on BleepingComputer, heap buffer overflow “is a reminiscence vulnerability leading to information being written to forbidden (normally adjoining) areas with out verify.” Hackers can use this vulnerability to overwrite an app’s reminiscence to govern its execution path. After that, they’ll then entry restricted info and execute arbitrary code.
As standard, we don’t truly know the way hackers are exploiting this safety flaw.
“Entry to bug particulars and hyperlinks could also be stored restricted till a majority of customers are up to date with a repair,” Google explains. “We may also retain restrictions if the bug exists in a third-party library that different initiatives equally rely upon, however haven’t but mounted.”
That is the eighth Chrome zero-day exploit that Google has patched in 2022. The one earlier than this surfaced on November 1 and concerned a kind confusion weak point.
Methods to replace your Chrome browser
Chrome doesn’t all the time apply the most recent updates if you open the browser, so if you wish to verify and see which model you might be operating, go to Settings after which About Chrome on the backside of the menu bar on the left aspect of the display screen.
If you’re already operating the most recent model of the browser, then you might be good to go. If not, you need to start the method of updating as quickly as attainable. As soon as it finishes downloading, click on the Relaunch button to complete updating.
Extra Google protection: For extra Pixel information, go to our Pixel 7 information.