Latest Chrome update patches new zero-day exploit
Every now and then zero-day exploits are discovered in software. In this instance, it appears that Google’s Chrome is suffering from such an exploit, but the good news is that Google has been quick to act and has since issued a patch for the browser that will prevent the exploit from being taken advantage of by malicious hackers.
According to Google, this is a type confusion bug found in Chrome’s V8 JavaScript engine. It was initially discovered by security researchers over at Avast and then reported to Google, who to their credit, were quick to act. Google does note that they are aware that exploits for the issue are out there in the wild, but stopped short of going into details.
The company says, “Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.” So, if you haven’t updated your Chrome browser yet, now might be a really good time to do so.
If you’re wondering if your version of Chrome has been updated, according to Google, it should be version 107.0.5304.87 for Mac and Linux and 107.0.5304.87/.88 for Windows.
Source: Google