Another emergency Chrome update is now available to patch day 0 vulnerabilities

Google released another security update for the company’s Google Chrome web browser that brings the browser version to 94.0.4606.71. Google Chrome 94.0.4606.71 is a security update that fixes two vulnerabilities that are actively exploited in the wild according to Google. The update is the third update Google released this month to address 0-day security issues in Google Chrome being exploited in the wild.

Google is rolling out the update to all Chrome installations, but users may want to speed up the update’s discovery and installation by loading chrome: // settings / help in the browser’s address bar, or by selecting Menu> Help> About Google Chrome from the menu.

Chrome displays the installed version on the page that is loaded and will run a check for updates. Updates that are discovered during verification are downloaded and installed automatically. The new extended stable channel has also been updated.

Google posted information about the update on the Chrome versions blog:

[$20000][1245578] High CVE-2021-37974: Use it after free in Safe Browsing. Reported by Weipeng Jiang (@Krace) of Legendsec’s Codesafe Team at Qi’anxin Group on 2021-09-01
[$TBD][1252918] High CVE-2021-37975: Use it later for free on V8. Reported by Anonymous on 2021-09-24
[$NA][1251787] Medium CVE-2021-37976: Information leak in the kernel. Reported by Clément Lecigne of Google TAG, with technical assistance from Sergei Glazunov and Mark Brand of Google Project Zero on 2021-09-21

Read This Now: We start cooperation with AOC!

Google indicates on the page that it is aware of exploits targeting the vulnerabilities CVE-2021-37975 and CVE-2021-37976.

Google is aware that the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild.

Both security issues are rated high, the second highest severity rating after critical. Google did not provide additional information on the problems, such as how they are exploited or how widespread the attacks are.

Google released another emergency security update for Chrome last week, patching another zero-day vulnerability that was actively exploited at the time according to the company. Two additional 0-day security issues were fixed on September 13, which were also exploited in the wild.

Chrome users may want to update the browser as soon as possible to protect the system against possible attacks.

advertising