Google Chrome releases an emergency security update to billions of its users on various platforms to fix a critical zero-day vulnerability, the CVE-2022-1364, which is currently being exploited by threat actors.
A person holds an iphone showing the app for Google chrome search engine. PA Photo. Picture date: Friday January 3, 2020.
Google Chrome Emergency Security Update
As per a news story by Bleeping Computer, Google has already released the emergency update in the flesh of its 100.0.4896.127 version to its Windows, Mac, and Linux desktop clients.
The search engine giant said in a statement that it is aware that an "exploit for CVE-2022-1362 exists in the wild.
Google went on to disclose that the emergency update of Chrome carries fixes for two security vulnerabilities in the web browser. It turns out that cyberattackers are actively exploiting one of them.
According to a recent report by Forbes, the emergency update of Chrome is the third of its kind in 2022, which was released to fix an actively exploited zero-day security bug.
Although the zero-day vulnerability is a severely critical issue, the update is rolling out to 3.2 billion users of the Google web browser in the next few weeks. It is worth noting that there's a way to install it now, but more on that later.
Chrome Zero-Day Security Vulnerability
The latest severe vulnerability found on Chrome is known as the CVE-2022-1364, which according to Forbes, is a type of confusion in V8. Essentially, the security issue targets the JavaScript engine that Chromium browsers, such as Edge, Brave, and Chrome, are using.
In this file photo taken on August 04, 2020, Prince, a member of the hacking group Red Hacker Alliance who refused to give his real name, uses his computer at their office in Dongguan, China's southern Guangdong province. - As the number of online devices surges and super-fast 5G connections roll out.
The zero-day vulnerability was reported by Clément Lecigne, who is part of the Google Threat Analysis Group, to the folks behind the web browser on April 14.
A day after the actively exploited security bug was reported to the Chrome team, Google swiftly responded with an emergency update.
On top of that, Google also admitted that it has already detected attacks exploiting CVE-2022-1364.
However, the tech giant kept mum about the details of the cyberattack. Google explained that "the access to bug details and links may be kept restricted" until most users have already installed the emergency update.
Google Chrome Emergency Security Update: How to Get
However, Bleeping Computer said in its report that users do not actually have to wait for a couple of days to get the emergency update. Instead, Chrome users could manually get the latest version of the browser straight from its settings menu.
Google Chrome's logo is seen at Google's annual developer conference, Google I/O, at Moscone Center in San Francisco on June 28, 2012 in California.
To do so, head to the Chrome menu. Then, select the "Help" section, and go to "About Google Chrome" to update your browser.
Related Article: Google Chrome 100 Update Releases New Icon for Desktop, Mobile | What's New
This article is owned by Tech Times
Written by Teejay Boris
