The remaining vulnerabilities are a use after free in WebRTC and WebXR, and a type confusion in V8. The critical security issue, CVE-2023-3214, is a use after free in "autofill payments" according to Google's description. Google makes no mentions of exploits in the wild, but administrators should update the Chrome web browser as soon as possible to protect it from attacks that target these vulnerabilities. One of the security issues has a severity rating of critical, the three remaining ones that Google disclosed a severity rating of high. The fifth was discovered internally and Google does not reveal information about security issues discovered internally. The company lists four of them on the official Chrome Releases blog. Google fixed five security issues in the Chrome web browser. Google released updates for Chrome for iOS and Android as well, but these do not address security issues according to the short release notes on the Chrome releases blog. Google plans to roll out the update to the entire Chrome population "over the coming days/weeks". The version should be the following one after the update, depending on the operating system that is used on the device: Chrome will download and install any update that it finds during the check.
Chrome users may select Menu > Help > About Google Chrome, or load chrome://settings/help directly, to display the installed version and run a check for updates.
The security update is available already and most Chrome installations should be updated to the new release automatically.
0 kommentar(er)
