It may be time to update your copy of the Google Chrome web browser.
Google on Friday released an updated version of Chrome that includes a fix for a high-severity zero-day bug that made it into the browser. The update is available now for macOS.
The Chrome Team said on Friday there was a “Stable Channel Update for Desktop” that brings Chrome up to version 99.0.4844.84 on macOS, as well as Windows and Linux. The update is important, as it fixes a high-severity bug in the browser.
The issue, identified as CVE-2022-1096, is a “type confusion” weakness for Chrome’s V8 JavaScript engine. The bug was identified by an anonymous security researcher and details of the bug’s workings are being kept restricted until “a majority of users are updated with a fix.”
Type confusion exploits refer to a bug that can crash a web browser due to the reading and writing of memory going outside of buffer boundaries. The exploits can cause crashes as well as be used by an attacker to execute code.
Google has yet to say when it would reveal the exact details of the vulnerability.
The update to the new version is available as an automatic update, though it can be manually performed in macOS by selecting “Chrome” in the main menu followed by “About Google Chrome.” Once the update has been downloaded, click “Relaunch.”
Stay tuned for additional details as they become available.
Via AppleInsider, Bleeping Computer, and chromereleases.googleblog.com