SIGforum.com    Main Page  Hop To Forum Categories  The Lounge    Chrome based Browsers - Zero Click Attack Threat - Update ASAP
Go
New
Find
Notify
Tools
Reply
  
Chrome based Browsers - Zero Click Attack Threat - Update ASAP Login/Join 
Thank you
Very little
Picture of HRK
posted
Last night Brave started acting up on my computer, locking up, automatically shutting down.

Chrome was doing a similar thing, ended up deleting Brave and reinstalling, made sure Chrome was updated as well.

Not sure it was related to the update needing to be done or coincidental, scans by Norton show PC is clean....

Research on the issue led to the article below.

Includes Chrome, Brave, Edge, Opera, Vivaldi.

Link

Just two days after a previous update, Google pushed an emergency Chrome update last Friday to deal with a zero-day vulnerability that is already being exploited in the wild. If you use Chrome, the update process is automatic; you just need to restart your browser when it asks for it to take effect. Users of other Chromium-based browsers like Microsoft Edge, Brave, Opera, and Vivaldi should also keep their eyes out for an update. Google is keeping things quiet for security reasons, but here’s what we know.

The vulnerability—catchily called CVE-2022-3075—was only brought to Google’s attention on August 30 by an anonymous security researcher. That the company pushed an emergency security update on September 2 speaks volumes about the severity of the underlying issue. The previous update—coincidentally released on August 30—patched 24 security issues including a different critical zero-day, so it is a big deal that Google felt the need to release an update to address a single vulnerability immediately. This was the sixth zero-day that Google has patched this year.

According to Google, CVE-2022-3075 concerns “insufficient data validation in Mojo,” a collection of important low-level routines in Chromium, which is the browser engine that Google Chrome uses. It is listed as a “critical” vulnerability, which essentially means that an attacker exploiting it is likely to be able to significantly compromise your browser or computer. Depending on the vulnerability, this could mean things like being able to steal passwords or credit card details, install malware on your system, and otherwise do very nasty things. These are the kind of exploits that hackers in movies (or working for national governments) use.
 
Posts: 24824 | Location: Gunshine State | Registered: November 07, 2008Reply With QuoteReport This Post
  Powered by Social Strata  
 

SIGforum.com    Main Page  Hop To Forum Categories  The Lounge    Chrome based Browsers - Zero Click Attack Threat - Update ASAP

© SIGforum 2024