Stop what you're doing and update Google Chrome

时间:2024-09-22 07:15:57 来源:泸州新闻网

Google is urging Chrome users to update the web browser right away to patch a zero-day vulnerability that is being actively exploited.

In a Tuesday tweet, Google Chrome Security and Desktop Engineering Lead Justin Schuh said users should install the latest version of the browser—72.0.3626.121—right away.

"Seriously, update your Chrome installs... like right this minute," he wrote.

Google started rolling out the patch for Chrome on Windows, Mac, and Linux on Friday. This week, Google revealed that the update corrects a "high" severity flaw—CVE-2019-5786—that has been under attack by cybercriminals.

Mashable Light SpeedWant more out-of-this world tech, space and science stories?Sign up for Mashable's weekly Light Speed newsletter.By signing up you agree to our Terms of Use and Privacy Policy.Thanks for signing up!

"Google is aware of reports that an exploit for CVE-2019-5786 exists in the wild," the web giant said.

A member of Google's Threat Analysis Group first reported the bug on Feb. 27. At this point, details of the vulnerability are scant, as Google said it's restricting access to bug details until a majority of users have installed the update.

As ZDNet notes, the vulnerability is "a memory management error in Google Chrome's FileReader—a web API included in all major browsers that lets web apps read the contents of files stored on the user's computer." The bug may allow for the execution of malicious code.

For the most part, Chrome updates are automatic, meaning you don't have to do much beyond opening and closing the browser window. It can take a few days to a full week for everyone to be automatically updated to the latest version, however. In this case, you should manually trigger the update to ensure that you're on the latest version as soon as possible.


Featured Video For You
Google wants to make its products more human
推荐内容