Security News > 2021 > March > Another Chrome zero-day exploit – so get that update done!
We've never quite understood Google's mention of rolling out updates over "Days/weeks" in an update bulletin that includes 47 security fixes, of which eight have a severity level of High.
We suggest going out manually and making sure you've got your Chrome update already, without waiting for those day/weeks to elapse until the update finds you.
If you're using a Chromium-based product from another browser maker, check with that vendor for information about whether their build is affected by this bug, and if so whether the patch is downloadable yet.
We don't know what form these particular bugs took, given that the Chromium team's discussion of the bugs in this release still seems to be in "Keep-it-private-to-stave-off-the-crooks-a-while-longer" mode.
If you aren't up-to-date, use the Update Google Chrome option on Windows or Mac to force an update.
If you're on Linux and your version of Chrome or Chromium is provided by your distro maker, check back with your distro for update details.
News URL
https://nakedsecurity.sophos.com/2021/03/04/another-chrome-zero-day-exploit-so-get-that-update-done/
Related news
- North Korean hackers exploit Chrome zero-day to deploy rootkit (source)
- North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit (source)
- Google fixes ninth Chrome zero-day exploited in attacks this year (source)
- Google fixes ninth Chrome zero-day tagged as exploited this year (source)
- New Chrome zero-day actively exploited, patch quickly! (CVE-2024-7971) (source)
- Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control (source)
- Week in review: PostgreSQL databases under attack, new Chrome zero-day actively exploited (source)
- Google tags a tenth Chrome zero-day as exploited this year (source)
- Russian APT29 hackers use iOS, Chrome exploits created by spyware vendors (source)
- Midnight Blizzard delivered iOS, Chrome exploits via compromised government websites (source)