If you’re one of the billion-plus users of Google Chrome on Windows, then you have just been warned to update your browser now…the desktop browser market, which means it’s the default for a billion-plus Windows users. Google’s last Chrome security update was a rather muted affair. Yes, there were a handful of patches in the mix—albeit nothing too exciting. The more interesting news was Windows Hello sign-on by.
Google doesn’t publish much detail on such security issues until time has been given for users to update their browsers; once made public, a clock starts ticking and the risk of exploitation increases. But Google does “aim to deploy the patch to all Chrome users in under 30 days,” when it’s critical, which illustrates the urgency here.
The type of vulnerability seen here is known as “use after free,” which means that the pointer to a memory location on the device is not cleared once that memory has been freed up. That pointer to the now free memory can be exploited by an attacker as part of an attack chain. There is no suggestion yet that this current vulnerability has been exploited. Two of the three high-risk patched vulnerabilities are also UAF.
You should set Chrome to update automatically, but as with all apps and platforms, when there’s a critical patch it’s worth checking that the update has been downloaded and installed, and if not doing so manually as soon as it’s available.
Technology Technology Latest News, Technology Technology Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Source: ForbesTech - 🏆 318. / 59 Read more »
Source: ForbesTech - 🏆 318. / 59 Read more »
Source: engadget - 🏆 276. / 63 Read more »
Source: BGR - 🏆 234. / 63 Read more »