However, to activate the update, you will need to restart the browser. If you’ve already had access to a security update, the act of checking your Chrome version number will kickstart the download and installation of the security update itself. Which means you shouldn’t play the waiting game, but rather check whether your browser is actually updated.
“Google is aware that an exploit for CVE-2023-3079 exists in the wild.” While that is all the technical information Google is releasing at the moment in order to give the update time to roll out to as many users as possible first, there is one published detail that is important. Google’s own Threat Analysis Group discovered the vulnerability. More than forbes Google issues Android TV security warning By davy winder What is CVE-2023-3079?ĬVE-2023-3079 is a type of confusion vulnerability in JavaScript. Others fall into the routine found by the fuzzing and internal audits category, and are never considered important enough to detail in the update posting. All of which, Google says, “will be rolling out over the coming days/weeks.”Īlthough the announcement states that this update includes two security fixes, in fact only one is detailed: CVE-2023-3079. In an announcement posted to the Chrome release blog on June 5, Google confirms that the desktop application has been updated to version 1.106 for Mac and Linux, and 1.110 for Windows. Google issues emergency security update for Chrome You can rest assured that when an emergency security update like this goes off, it’s time to take it seriously and make sure your browser is secure. Although Chrome security updates themselves aren’t the rarest beast, updates that fix a single, actively exploited, 0Day vulnerability are far from the norm. Google has confirmed that a zero-day security vulnerability is being actively exploited in its Chrome web browser and has issued a rare emergency security update in response.
0 kommentar(er)
