Security News > 2022 > October > Chrome issues urgent zero-day fix – update now!

Chrome issues urgent zero-day fix – update now!
2022-10-29 15:08

Google pushed out a bunch of security fixes for the Chrome and Chromium browser code earlier this week.

In short, what we mean is that when Google says "It is aware of reports" of an attack launched by exploiting Chrome in real life, we're ready to assume that you can translate this into "The bug is real, and it really can be exploited, but because we didn't actually investigate the hacked system in real life ourselves, we're still on safe ground if we don't come straight out and say, 'Hey, everyone, it's an 0-day'."

Today's browser RCE exploits can be fiendishly complex to discover and expensive to acquire, considering how much effort organisations like Mozilla, Microsoft, Apple and Google put into hardening their browsers against unwanted code execution tricks.

Even though Chrome will probably update itself, we always recommend checking anyway.

We're not sure whether the Android version of Chrome is affected, and if so what version number to look out for.

You can watch for any forthcoming update announcements for Android on Google's Chrome Releases blog.


News URL

https://nakedsecurity.sophos.com/2022/10/29/chrome-issues-urgent-zero-day-fix-update-now/