Advertisement
Singapore markets closed

  • Straits Times Index

    3,280.10
    -7.65 (-0.23%)
     

  • Nikkei

    37,934.76
    +306.28 (+0.81%)
     

  • Hang Seng

    17,651.15
    +366.61 (+2.12%)
     

  • FTSE 100

    8,119.25
    +40.39 (+0.50%)
     

  • Bitcoin USD

    64,200.33
    +402.04 (+0.63%)
     

  • CMC Crypto 200

    1,384.93
    -11.60 (-0.83%)
     

  • S&P 500

    5,048.42
    -23.21 (-0.46%)
     

  • Dow

    38,085.80
    -375.12 (-0.98%)
     

  • Nasdaq

    15,611.76
    -100.99 (-0.64%)
     

  • Gold

    2,359.50
    +17.00 (+0.73%)
     

  • Crude Oil

    84.17
    +0.60 (+0.72%)
     

  • 10-Yr Bond

    4.7060
    +0.0540 (+1.16%)
     

  • FTSE Bursa Malaysia

    1,575.16
    +5.91 (+0.38%)
     

  • Jakarta Composite Index

    7,036.08
    -119.22 (-1.67%)
     

  • PSE Index

    6,628.75
    +53.87 (+0.82%)
     

New Google Chrome vulnerability puts 2.65 billion users at risk

Chandraveer Mathur
·2-min read


New Google Chrome vulnerability puts 2.65 billion users at risk
New Google Chrome vulnerability puts 2.65 billion users at risk

26 Sep 2021: New Google Chrome vulnerability puts 2.65 billion users at risk

Google has recently revealed it found this year's 11th zero-day exploit for the Chrome browser. The issue is said to affect Windows, Linux, and macOS users and Google confirmed that it is aware of bad actors possibly exploiting this vulnerability in the wild. Google has not said much, but a fix has already been released and is in the delivery pipeline for all users.

What’s zero-day: Hackers could have exploited vulnerability before Google developed a fix

In a new blog post, Google revealed that the newly-discovered vulnerability bears unique identifier code CVE-2021-37973, which is Chrome's eleventh zero-day exploit discovered this year. Zero-day classification means that hackers could have exploited this vulnerability before Google released a fix, making it far more dangerous than other vulnerabilities. If your Chrome version is 94.0.4606.61 or newer, you are protected from this vulnerability.

All hush-hush: Discovery of vulnerability credited to Google TAG employee

To protect its 2.65 billion users and buy them time to upgrade to the latest version including the fix, Google is not disclosing much about the zero-day vulnerability. The company revealed it has a "High" threat ranking and that it was reported on September 21 by Google TAG employee Clément Lecigne with assistance from Google Project Zero's Sergei Glazunov and Mark Brand.

Details: Ten high-rated Chrome UAF vulnerabilities were discovered in September

Forbes reported that this is a Use-After-Free (UAF) vulnerability, a memory exploit characterized by when a program (in this case, Chrome) fails to clear the pointer to the memory after it is freed. In simpler terms, the vulnerability exploits the shoddy job Chrome does when it unloads itself from the computer's RAM. Ten such High-rated Chrome UAF vulnerabilities were discovered in September alone.

Plugging loopholes: Update for all Chrome users has already been issued

Google has said that it has already issued an update for all Chrome users. On Chrome, navigate to Settings > Help > About Google Chrome and immediately install any pending updates. If the update is not available yet and your Chrome version is lower than 94.0.4606.61, revisit this Settings page frequently. Remember that Chrome must be restarted for updates to take effect.

The news article, New Google Chrome vulnerability puts 2.65 billion users at risk appeared first on NewsBytes.

Also see: Google fixes 11 Chrome browser bugs, including two zero-day vulnerabilities
Windows MSHTML zero-day vulnerability actively exploited for remote code execution
Chrome's latest mobile update gives major boost to password security
Read more on Science by NewsBytes.