Vivaldi and Microsoft patch zero-day vulnerability in their browsers
Vivaldi and Microsoft have released updates to their web browsers that address security issues, including one that is actively exploited in the wild.
Vivaldi Technologies announced the release of a minor update for the desktop version of the Vivaldi web browser on April 15, 2022. The new version of the web browser is now available and automatically downloaded and installed on most devices.
Vivaldi users can speed up the update installation by selecting Vivaldi Menu > Help > Check for Updates. The page that opens shows the current version that is installed; a newer version is automatically downloaded and installed at this point, if available.
The launch announcement on Vivaldi’s website is brief, but to the point:
[Chromium] Updated to 100.0.4896.133 (includes fix for CVE-2022-1364)
Vivaldi released five minor updates for version 5.2 of the browser, which it released in early April 2022.
Microsoft also released an update for the desktop version of its Microsoft Edge web browser. The update is now available and should be distributed to most devices running Edge automatically.
Edge users can speed up the update installation by loading edge://settings/help in the browser’s address bar. The page that opens shows the installed version. A search for a newer version is automatically performed when you open the page, and any new versions found are automatically downloaded and installed.
The release notes for Microsoft Edge 100.0.1185.44 confirm that the update includes the security fix for the Chromium vulnerability being exploited in the wild:
This update contains a fix for CVE-2022-1364, which the Chromium team has reported as having an exploit in the wild. For more information, see the Security Update Guide.
Microsoft notes that the update also includes a fix for the Edge-specific vulnerability. The vulnerability, CVE-2022-29144, fixes an elevation of privilege vulnerability in Microsoft’s browser. The Edge-specific issue is not actively exploited according to Microsoft.
Google has also released a security update for its Chrome web browser to address security issues.