UPDATE YOUR SOFTWARE ALREADY

I know I know, you hear it all the time, BUT UPDATE YOUR SOFTWARE. Today’s bugs all come from Chrome, where we have MULTIPLE security vulnerabilities that all rank as HIGH — according to Google.

What do they do? Google has withheld details, which often means that if you simply *visit* a webpage your system can be compromised. If some instances, hackers can get this kind of code in to ads, so they can cover thousands of websites at once (this is why all your IT people have ad blockers).

Safari and Microsoft Edge both use parts of Chrome under the hood, so update those as well as soon as you have a chance.

#manageditservices #cybersecurity

Reference:

1311701  High  CVE-2022-1312 Security: UAF in DumpDatabaseHandler

1283050  High  CVE-2022-1308 Heap-use-after-free in RenderViewHostImpl::ActivatePrerenderedPage

1310717  High  CVE-2022-1311 Use-after-Free on crostini::CrostiniExportImport::OpenFileDialog

1292261  High  CVE-2022-1125 Security: Heap-use-after-free in BrowserList::AddBrowser

1268541  Medium  CVE-2022-1139 Security: Another Cross-Origin Response Size Leak Via BackgroundFetch

1315901  High  CVE-2022-1364 Security: [day 0] JIT optimization issue