Google has just released an emergency security update for Chrome. The update aims to fix a vulnerability discovered by Vsevolod Kokorin, a researcher at Solidlab, in the web browser's code.
Sensitive Data Theft
The flaw affects the loader, the Chrome component responsible forpreparing and managing the loading of a web page's resources. According to Google, the vulnerability results from "insufficient policy enforcement" of the component's security. This flaw allows an attacker to access data from other sites by using a booby-trapped HTML page. This is obviously against Chrome's policy.
Specifically, the flaw could allow a malicious site to collect sensitive data from other sites you visit, such as login credentials, passwords, or personal information. This is potentially a disaster for the privacy of the 3.45 billion Internet users who use Chrome.
A flaw exploited by hackers?
Google indicates that it has become aware of a tactic to exploit the vulnerability. However, the company does not reveal in black and white whether the flaw has actually been exploited by cybercriminals. In any case, this is what the warning suggests.
As Google indicates, a fix has been included in Chrome update 136.0.7103.113 for Windows and Linux, as well as in version 136.0.7103.114 for macOS. The update will be available on all devices in the coming weeks. We strongly encourage you to install it as soon as it is available.
To install the Chrome update as soon as it is available, open the browser, click on the three dots in the top right corner, then go to "Help" and select "About Google Chrome". Chrome will automatically check for an update. If one is offered by Google, it will be downloaded and installed. Once the installation is complete, simply click on "Relaunch" to restart the browser and apply the update. For simplicity, we recommend that you enable automatic updates for Chrome.
Source: Google
0 Comments