Google wants you to update Chrome right now - Zero-Day exploited


By MYBRANDBOOK


Google wants you to update Chrome right now - Zero-Day exploited

Hot line: Google is notifying to all the Chrome users globally on an urgent basis to update their browsers immediately after a zero-day exploit that could give hackers direct access to a user's OS has been found. The most recent version is 72.0.3626.121, and it's the version you want to be running to make sure you're safe from this exploit.

 

Google is pushing users to update Chrome across all platforms after a critical vulnerability was discovered and patched.

 

The vulnerability exploits a security flaw known as CVE-2019-5786. The security flaw is a memory management issue in Chrome's FileReader which gives hackers the opportunity to inject and execute malicious code.

 

In computer parlance, a zero-day is an exploit that the software vendor is not aware of — and therefore did not have time to address — until it’s publicized. This particular attack involves the FileReader API that allows websites to read local files, while the 'Use-after-free' class of vulnerabilities — at worse — allows for execution of malicious code.

 

FileReader is a embedded program in most browsers that allows web apps to read the contents of a user's local file system. The vulnerability identified by Google allows malicious code to leave Chrome's security environment and run commands on the underlying OS.

 

Well-known Chrome security researcher Justin Schuh concisely addressed the urgency of this update on Twitter:

 

 

Google is calling this a "zero-day" vulnerability, meaning that the bad guys figured out how to exploit it before the good guys were able to find and patch it.

 

The version of Chrome you should be running is 72.0.3626.121, released at the beginning of March 2019. To check your version number, type chrome://settings/help into the address bar. From there, you will be able to see your version number. Just going to that page will trigger an update check, and Chrome will prompt you to relaunch it when finished. You can also manually download the latest version of Chrome here.

 

Link : 

 

 

How to Update 

 

Normally updates happen in the background when you close and reopen your computer's browser. But if you haven't closed your browser in a while, you might see a pending update:

 

   1. On your computer, open Chrome.

   2. At the top right, look at More More.

   3. If an update is pending, the icon will be colored:

        Green: An update's been available for 2 days.

        Orange: An update's been available for 4 days.

        Red: An update's been available for 7 days.

 

To update Google Chrome:

 

    1. On your computer, open Chrome.

    2. At the top right, click More More.

    3. Click Update Google Chrome. If you don't see this button, you're on the latest version.

    4. Click Relaunch.

 

The browser saves your opened tabs and windows and reopens them automatically when it restarts. If you'd prefer not to restart right away, click Not now. The next time you restart your browser, the update will be applied.

 

 

 E-Magazine 
 VIDEOS  Placeholder image

Copyright www.mybrandbook.co.in @1999-2024 - All rights reserved.
Reproduction in whole or in part in any form or medium without express written permission of Kalinga Digital Media Pvt. Ltd. is prohibited.
Other Initiatives : www.varindia.com | www.spoindia.org