Chrome Emergency Update: Patch Urgent Zero-Day Vulnerability
Google has rushed out an emergency update for its Chrome desktop browser, patching a high-severity vulnerability (CVE-2022-3723) that's being actively exploited. This is the seventh such zero-day fix for Chrome this year.
The flaw, a type-confusion issue in the Chrome V8 JavaScript engine, could allow attackers to read sensitive data or cause crashes. Google has not specified the level of activity exploiting this vulnerability.
Qualys, a cybersecurity company, supports automated patching of Chrome out of the box. Their Patch Management service offers Zero-Touch Patching, which can automate and prioritize patch deployment for risky applications like Chrome. This helps organizations mitigate zero-day threats, which often target third-party business applications as entry points.
Users are urged to update their Chrome browsers promptly to version 105.0.5195.102 for Windows, Mac, and Linux. This update addresses the critical vulnerability and ensures better security against potential attacks.