In some ways, it may reflect that recent related vulnerability attacks have really become more and more rampant. Or perhaps as Google Chrome becomes more and more powerful and diverse, it eventually reveals more weaknesses. But more importantly, as this core browser technology is widely used, hackers and other interested parties will naturally pay more “attention” to this popular browser. Anyway, update soon! Google Chrome’s seventh zero-day vulnerability fix this year is here. Don’t say we didn’t give you a heads up!
Update soon! Google Chrome’s 7th zero-day vulnerability fix this year is here
Since this kind of information often appears in news headlines, everyone will mistakenly think it is old news, so the “(known) number of times” information is specially included. I just want everyone to know that although it seems that every time I see it, it is a correction of zero-day attacks, but in fact, as the popularity of Google Chrome increases day by day, the probability of becoming one of the main targets of intentional organizations or hackers will naturally be difficult to decrease. You should get used to this, and you need to always pay attention to whether your browser has been updated to the latest version to avoid being victimized!
As an information security issue, zero-day attacks/zero-day vulnerabilities/zero-day vulnerabilities/zero-day attacks (Zero-Day Vulnerability/0-day Vulnerability) are becoming increasingly common. By definition, it is an attack method that hackers use to exploit vulnerabilities that have not yet been patched. At the same time, because it has certain utilization value, it has also become a target for the spy network of national units. Such problems test whether manufacturers have the ability to quickly repair to minimize the damage caused by such techniques.
In such a situation of “all kinds of scrambling for time”, since the patches and updates have been provided to users as soon as possible, I personally think that when there is such an update, it is recommended that everyone install it as soon as possible to avoid any unexpected security issues.
Google recently released an emergency patch update for zero-day attacks CVE-2022-3723 (app version 107.0.5304.87/88) for Chrome desktop users. Fixed a Type Confusion Vulnerability Bug in the Chrome V8 Javascript engine discovered by security firm Avast. It has been reported that this may cause out-of-bounds memory access when an application allocates resources of an incompatible type.
This zero-day vulnerability was reported on 10/25 and a related correction update was quickly released today. According to foreign media observations, this vulnerability is already the seventh Chrome zero-day vulnerability this year. The remaining times are:
CVE-2022-3075
CVE-2022-2856
CVE-2022-2294
CVE-2022-1364
CVE-2022-1096
CVE-2022-0609
Updates will be released from February to September. It has to be said that as Chrome becomes more and more popular, it is really recommended that everyone pay more attention to relevant updates and install them as soon as possible to avoid intentional people taking advantage of vulnerabilities and causing related losses. Don’t wait, check for Chrome update information and install it!
Further reading:
Do whatever you want, iPhone 14 Pro Max in-depth real-life shooting experience
Source: KOCPC Chinese