Organizations using the Microsoft Edge browser should update the browser to version 1.42, as Microsoft has closed the affected vulnerability there (see Edge 1.42).
agencies must have patched affected Chrome installations by Dec. Meanwhile, the US Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its list of most dangerous and already exploited vulnerabilities (see also). This vulnerability was assigned a CVE index of 8.8 (max is 10). Google did not provide more detailed vulnerability information but writes that exploitation has been observed in the wild. The updates close a previously exploited Type Confusion vulnerability CVE-2022-4262 in the V8 JavaScript engine. On December 2, 2022, Google had provided security updates to Google Chrome in the 108 branch in the stable channel for Mac, Linux, and Windows, as well as for Android (see Chrome 1.94/.95 security fixes). Warning about CVE-2022-4262: Update Google Chrome / Edge.
The latest build of the Chrome browser can also be downloaded here. One can (and in this case should) also update the browser manually (via the menu and the About Google Chrome command). The updates probably fixes some bugs, closed vulnerabilities are not listed.Ĭhrome will be rolled out to systems over the next few days via the automatic update feature. The stable channel as well as the extended stable channel have been updated to version 1.98 for Mac and Linux and version 1.99 for Windows.
The relevant entry for Chrome 1.9x can be found on the Google blog.
0 kommentar(er)
