– Moderation is a platform operator saying “we don’t do that here”. Google released the first Chrome 103 release earlier this month this update included a fix for a 0-day vulnerability that was exploited in the wild. It is still recommended to update Chrome to the latest version as soon as possible.
Google makes no mention of attacks in the wild.
Low CVE-2022-2163: Use after free in Cast UI and Toolbar. Reported by YoungJoo of CompSecLab at Seoul National University on High CVE-2022-2481: Use after free in Views. Reported by Sergei Glazunov of Google Project Zero on High CVE-2022-2480 : Use after free in Service Worker API. High CVE-2022-2479 : Insufficient validation of untrusted input in File. 
High CVE-2022-2478 : Use after free in PDF. High CVE-2022-2477 : Use after free in Guest View. Here is the full list as reported by Google: The maximum severity rating of all 11 security issues is high, the second highest after critical. Google does not list security issues that it found internally on the blog. Six of these, all reported by third-party researchers, are mentioned specifically on the blog. The blog post confirms that 11 different security issues are patched in the new Chrome release. Google published an article on the Chrome Releases Blog to inform Chrome users and administrators about the update. The Android version of Chrome does not support such an option, as updates are distributed exclusively via Google Play. A restart is required to complete the upgrade. If not installed already, Chrome will download and install the security update. The current version is displayed on the page and Chrome runs a check for updates to find out if a new version is available. Chrome users may speed up the installation of the security update on desktop versions of Chrome by loading chrome://settings/help in the browser's address bar. Most Chrome browsers will receive the update automatically, thanks to the built-in automatic updating functionality. The security update is already available.
0 kommentar(er)
