Google Chrome under attack via zero day flaw mdash what to do now Tom s Guide
Google Chrome under attack via zero-day flaw - what to do now Tom's Guide Skip to main content Tom's Guide is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Here's why you can trust us. Google Chrome under attack via zero-day flaw - what to do now By Alan Martin published 15 April 2022 Zero-day Chrome flaw fixed, but users should make sure they're up to date (Image credit: monticello/Shutterstock) Update: Google issues urgent security fix for Chrome - update right now. If you use the Google Chrome browser, you're advised to stop what you're doing and update immediately. Google has published a security advisory (opens in new tab) that accompanied the release of Chrome 100.0.4896.127 for Windows, Mac and Linux warning of a high-severity zero-day flaw that's actively being exploited by hackers. "Google is aware that an exploit for CVE-2022-1364 exists in the wild," the company wrote. For obvious reasons, Google is cagey about the exact nature of the vulnerability. These things are typically fully outlined only once the vast majority of people are protected from it, in order to blunt the risk of an attack. But what we do know is that CVE-2022-1364 is a so-called "confusion" weakness (opens in new tab) in Chrome's V8 JavaScript engine. This type of flaw often leads to browser crashes by reading or writing memory of out buffer bounds, but the high severity label for this specific bug suggests that it could be the rarer kind that allows attackers to execute damaging code. The Google Threat Analysis team's Shane Huntley reported (opens in new tab) that the exploit was discovered by his teammate Clément Lecigne, and the fix was implemented within 24 hours. Notably, it's the third zero-day threat fixed in 2022, after CVE-2022-0609 and CVE-2022-1096 were squashed earlier this year. Another Chrome 0day (CVE-2022-1364) in the wild found by @_clem1 . Reported to Chrome yesterday and updated release out now: https://t.co/JIboCmb0yJIncredibly impressive how fast @googlechrome is getting at rolling out fixes.April 14, 2022See more How to update Chrome now While Google says that the update to 100.0.4896.127 will be rolled out in the coming days and weeks, given the risks involved, we'd suggest you ensure you have it as soon as it's available. In Google Chrome, use your mouse cursor (or your finger if you're on a touchscreen) to click the three vertical dots at the top right of the browser toolbar, then scroll down to and hover your cursor over Help in the menu that appears. A fly-out menu will appear; click on "About Google Chrome," and Chrome will open a new tab listing your version number. If your browser needs an update, this tab will automatically begin the process and then prompt you to relaunch. Assuming the vulnerability is universal to all Chromium-based browsers, we should also see the likes of Microsoft Edge, Brave, Opera and Vivaldi all seeing patches of their own in the near future, so keep an eye out if you're outside of Chrome.Today's best Norton 360 Standard deals1st yearReduced Price (opens in new tab)Norton 360 Standard (opens in new tab)$84.99 (opens in new tab)$39.99/year (opens in new tab)View (opens in new tab)at Norton (opens in new tab) Be In the Know Get instant access to breaking news, the hottest reviews, great deals and helpful tips. Alan Martin Freelance contributor Alan has been writing about tech for over a decade, covering phones, drones and everything in between. Previously Deputy Editor of tech site Alphr, his words are found all over the web and in the occasional magazine too. When not weighing up the pros and cons of the latest smartwatch, you'll probably find him tackling his ever-growing games backlog. Or, more likely, playing Spelunky for the millionth time. Topics Software See all comments (0) No comments yet Comment from the forums MOST READMOST SHARED1Walmart Rollback sale live blog - Apple Watch 8 for $349, 55" 4K TV for $198, and more2Google Pixel Fold tipped for an early 2023 release window 3Prime Day deals LIVE - the best from Amazon Prime Early Access sale4Amazon TV sales - best Prime Day TV deals right now 5Luckiest Girl Alive is new No. 1 Netflix movie - but critics and audiences are split1Walmart Rollback sale live blog - Apple Watch 8 for $349, 55" 4K TV for $198, and more2Prime Day deals LIVE - the best from Amazon Prime Early Access sale3Amazon TV sales - best Prime Day TV deals right now 4Luckiest Girl Alive is new No. 1 Netflix movie - but critics and audiences are split5iPhone 14 Pro vs iPhone 13 Pro: Biggest upgrades