Google has released a Chrome update that fixes major security vulnerabilities in the browser on smartphones and Windows, Mac, and Linux computers.<\/p>\n
The tech giant said the update includes ten security fixes, with at least six vulnerabilities considered high severity. Google said the update would roll out over the coming weeks.<\/p>\n
Google hasn’t provided specifics on the vulnerabilities and said it won’t until most users have updated their browsers. It recommends that users install the update as soon as it rolls out to their devices.<\/p>\n
“We will also retain restrictions if the bug exists in a third-party library that other projects similarly depend on, but haven’t yet fixed,” it said in a blog post<\/a><\/strong>.<\/p>\n The high-severity vulnerabilities are labelled as follows:<\/p>\n Malicious actors could leverage the vulnerability to exploit heap corruption via a crafted HTML page.<\/p>\n The first two vulnerabilities \u2014 CVE-2022-3885 and CVE-2022-3886 \u2014 represent security flaws in Google’s open-source JavaScript engine known as V8 and Google Chrome’s Speech Recognition feature.<\/p>\n CVE-2022-3887 and CVE-2022-3888 relate to Google’s background script-running feature Web Workers and Chrome’s WebCodecs API, respectively.<\/p>\n The CVE-2022-3889 vulnerability provides the browser’s V8 engine with the wrong code, while the CVE-2022-3890 flaw could let attackers bypass Google’s sandbox security measures.<\/p>\n Google rewarded security researchers for disclosing the vulnerabilities, with one researcher getting $21,000 (R365,000) for their tip-off.<\/p>\n Google said the update will roll out to users over the coming weeks and that it cannot provide specific details relating to the flaws until most users have updated.<\/p>\n","protected":false},"author":341076,"featured_media":421484,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[27],"tags":[1137,1799,2120,807],"class_list":["post-468573","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-google-chrome","tag-linux","tag-mac","tag-windows"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/468573"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341076"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=468573"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/468573\/revisions"}],"predecessor-version":[{"id":468705,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/468573\/revisions\/468705"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/421484"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=468573"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=468573"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=468573"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
\nNow read: Chrome extension lets attackers steal accounts and use host machines in DDoS attacks<\/a><\/h2>\n","protected":false},"excerpt":{"rendered":"