Name: Chrome 88 update patches a zero-day that is being actively exploited | Engadget
Brand: engadget.com
SKU: engadget-com-52
Availability: OnlineOnly

critic

Chrome 88 update patches a zero-day that is being actively exploited | Engadget

preview

Google Chrome’s autoupdate feature means we don’t usually need to think about being on the latest version, but occasionally users will want to take a break and make sure they’re upgraded — this is one of those days. The version of Chrome 88 rolling out now for Windows, Mac and Linux (88.0.4324.150) addresses one item, but it’s a big one., security researcher Mattias Buelens reported a vulnerability in Chrome’s WebAssembly and JavaScript engine V8, which could allow an attacker to execute code on a victim’s computer. Google didn’t go into detail about the problem, tagged CVE-2021-21148, but said it’s aware of reports the bug is already being exploited in the wild, so update immediately.In a note, Google said “Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.” As a result we don’t know what exploit this is tied to, but notes the timing puts it close to revelations about a campaign carried out by North Korean hackers that targeted security researchers, which may have relied on zero-day exploits in Chrome and Internet Explorer.Turn on browser notifications to receive breaking news alerts from EngadgetYou can disable notifications at any time in your settings menu.Turn onRegardless of where or how the bug is being exploited, you’ll still want to update your browser (and keep an eye out for fixes to other potentially affected software, like other Chromium-based browser) right away. As ZDNet and noted, this occasionally happens. A required a restart to for the fix to take effect, and there was a stretch last fall where, in one month, Google addressed five zero-days that were being actively exploited.All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission. All prices are correct at the time of publishing.

Google Chrome’s autoupdate feature means we don’t usually need to think about being on the latest version, but occasionally users will want to take a break and make sure they’re upgraded — this is one of those days. The version of Chrome 88 rolling out now for Windows, Mac and Linux (88.0.4324.150) addresses one item, but it’s a big one., security researcher Mattias Buelens reported a vulnerability in Chrome’s WebAssembly and JavaScript engine V8, which could allow an attacker to execute code on a victim’s computer. Google didn’t go into detail about the problem, tagged CVE-2021-21148, but...

public

Richard Lawler

Engadget is the original home for technology news and reviews. http://youtube.com/engadget

engadget.com

Credible

Speculation

Anecdotal Evidence

Generalization

Stacking the Deck

Appeal to Authority

Straw Man

Slippery Slope

Emotional Appeal

Red Herring

False Dilemma

Illogical

Moral Equivalency

Ad Hominem

Correlation w/o Causation

Semantics

Begging the Question

Faulty Analogy

Non Sequitur

Bandwagon

Dogmatism

Failing Occam's Razor

Biased

Pure Opinion

Hit Piece

Racial Bias

National Bias

Religious Bias

Financial Incentive

Political Agenda

Gender Bias

Misused Image/Video

Study Misinterpreted

Mistake

Misused Term

Science Misrepresented

Factual Error

Satire

Surface Level

Lack of Reliable Sources

Sensational

Not Credible

Investigative

Balanced

Well Sourced

Great Context

sports

entertainment

U.S.

international

business

technology

science

culture

politics

media

health

Chrome 88 update patches a zero-day that is being actively exploited | Engadget

No article scores yet.

CRITIC REVIEWS

PUBLIC REVIEWS