Google released a new security update for the company’s Chrome browser on October 28, 2021. The new update fixes eight security vulnerabilities in the web browser, two of which are exploited in the wild according to Google.
As is the case with all versions of Chrome, these are rolled out over time for the entire browser population. Chrome users should consider updating as soon as possible to fix the vulnerabilities and block any attempts to exploit the vulnerabilities.
Chrome desktop users must point their browser to crome: // settings / help to start the update check. The same page is opened by navigating to the Chrome Menu> Help> About Google Chrome.
Chrome displays the installed version on the page and runs a check for updates when it opens. Any new version found is downloaded and installed automatically. All the user has to do is click the reset button to complete the installation.
A check on the same page after the update should return version 95.0.4638.69 (official build).
Chrome users on Android cannot apply the update in the same way. Its distribution is managed by Google Play.
The latest version of Chrome for the stable channel fixes eight security vulnerabilities in total. All issues reported by external security investigations have a high severity rating, the second highest rating after critical.
The two vulnerabilities that are exploited in the wild are the following:
[$N/A][1249962] High CVE-2021-38000 – Insufficient validation of untrusted entries in Intents. Reported by Clement Lecigne, Neel Mehta and Maddie Stone of Google Threat Analysis Group on 2021-09-15
[$TBD][1263462] High CVE-2021-38003: Improper implementation in V8. Reported by Clément Lecigne of Google TAG and Samuel Groß of Google Project Zero on 2021-10-26
Google did not disclose additional details. It is unclear how widespread the attacks are and how they are carried out.
Google already patched a total of 15 day 0 vulnerabilities in Chrome in 2021.
Now you: ¿Usas Google Chrome?
advertising