Google Chrome update includes ‘critical’ security patch - so download now
Looks to fix Google Chrome zero-day flaw used in previous attacks
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Users ofGoogle Chromehave been told to download and update their software with an emergency patch that fixes a potentially dangerous security flaw.
The company has issued Chrome 96.0.4664.110 for Windows, Mac, and Linux, to address a high-severity zero-day vulnerability for itsweb browserthat has apparently already been exploited.
“Googleis aware of reports that an exploit for CVE-2021-4102 exists in the wild,” the company said in asecurity advisory. “We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.”
Chrome security update
Google says the flaw, labelled as CVE-2021-4102, was reported anonymously, and rates its severity as high.
It concerns a “use after free” vulnerability in the Chrome V8 JavaScript engine, which could allow third-parties to hack into the program and execute external code.
The company has also addressed four other security issues in its new release, three of which are also rated as high, and one rated as “critical”.
This latter threat, CVE-2021-4098, discovered by Google Project Zero researcher Sergei Glazunov, concerned insufficient data validation in Mojo, a collection of runtime libraries managing Chrome’s inter-process communication system.
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
The update can be installed by restarting your browser.
The news comes shortly after Google announced it had reconfigured the Privacy and Security settings in its latest Chrome beta release in a bid to streamline the ability to delete data stored by websites. The company claims the move will enable users of the web browser to better understand and manage their privacy on the web by providing more clarity on controlling a site’s storage settings.
ViaMSPowerUser
Mike Moore is Deputy Editor at TechRadar Pro. He has worked as a B2B and B2C tech journalist for nearly a decade, including at one of the UK’s leading national newspapers and fellow Future title ITProPortal, and when he’s not keeping track of all the latest enterprise and workplace trends, can most likely be found watching, following or taking part in some kind of sport.
7 myths about email security everyone should stop believing
Best Usenet client of 2024
NYT Strands today — hints, answers and spangram for Sunday, November 10 (game #252)
