However, from the vulnerability description we can learn a few things. Access to bug details and links may be kept restricted until a majority of users are updated with a fix. Google is always very careful about providing information about vulnerabilities, for obvious reasons. The critical CVE patched in these updates is listed as CVE-2023-3214: Use after free in Autofill payments in Google Chrome prior to 1.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The Common Vulnerabilities and Exposures (CVE) database lists publicly disclosed computer security flaws. Then all you have to do is relaunch the browser in order for the update to complete.Ĭhrome needs a relaunch to apply the updateĪfter the update, your version should be 1.133 for Mac and Linux, and 1.133/134 for Windows, or later. If there is an update available, Chrome will notify you and start downloading it.
My preferred method is to have Chrome open the page chrome://settings/help which you can also find by clicking Settings > About Chrome. And now would be a good time, given the severity of the vulnerabilities in this batch. So, it doesn’t hurt to check now and then. But you can end up lagging behind if you never close the browser or if something goes wrong-such as an extension stopping you from updating the browser.
The easiest way to update Chrome is to allow it to update automatically, which basically uses the same method as outlined below but does not require your attention. 1.130/.131 for Android will become available on Google Play over the next few days.
If you’re a Chrome user on Windows, Mac, or Linux, you should update as soon as possible. Google labels vulnerabilities as critical if they allow an attacker to run arbitrary code on the underlying platform with the user's privileges in the normal course of browsing. One of these security fixes is for a critical vulnerability in Autofill payments. Google has released a Chrome update which includes five security fixes.
0 kommentar(er)
