Google launched a brand new model of Chrome 103.0.5060.114, a secure chennal replace with the fixes of safety vulnerabilities, together with a Zero-day bug that was exploited vast by unknown menace actors.
Chrome 103 was launched with the fastened for 4 safety vulnerabilities reported by exterior safety researchers.
CVE-2022-2294, a Heap-based buffer overflow zero-day bug permits attackers to execute an arbitrary code remotely and bypass the safety mechanism, moreover, it results in DoS: Crash, Exit, or Restart the affected system.
“A heap overflow situation is a buffer overflow, the place the buffer that may be overwritten is allotted within the heap portion of reminiscence, usually that means that the buffer was allotted utilizing a routine resembling malloc()”. mitre explains.
Listed here are the opposite bugs that have been fastened on this new safety replace:
- Excessive CVE-2022-2294: Heap buffer overflow in WebRTC.
- Excessive CVE-2022-2295: Sort Confusion in V8. Reported by avaue and Buff3tts at S.S.L.
- Excessive CVE-2022-2296: Use after free in Chrome OS Shell. Reported by Khalil Zhani
The Zero-day bug affected each Home windows and Android variations and the bug was reported by Jan Vojtesek from the Avast Menace Intelligence group.
The attacker behind this exploit remains to be unknown. Google says this zero-day vulnerability was exploited within the wild and doesn’t but share technical particulars or any data concerning these incidents.
Chrome 103.0.5060.114 Replace:
Customers can replace the brand new model of chrome by checking Chrome menu > Assist > About Google Chrome, the place it’s going to test auto-update and request you to relaunch the browser after the patch will get downloaded.
As Google Confirms that the bug is energetic beneath assault, Customers are urged to replace chrome instantly to use the patch.
You’ll be able to comply with us on Linkedin, Twitter, Fb for each day Cybersecurity updates.
