Google closes critical security vulnerability in Chrome browser
Just last week, Google released an emergency update for Chrome to close a zero-day vulnerability. Now comes the next one, with which the developers are fixing five more security vulnerabilities, including one categorised as critical.
Independent security researchers have once again discovered several new vulnerabilities in the Chrome web browser. Google refers to five different vulnerabilities and categorises one of them as critical. The new Chrome versions 114.0.5735.133/134 for Windows and 114.0.5735.133 for macOS and Linux from 13 June fix these five vulnerabilities for the web browser. The Google developers explained this in their version update. Google has also already released a new version for Android in which the gaps have been closed. The vulnerabilities may allow attackers to crash the web browser using manipulated websites or even infiltrate it with malware.
The vulnerability "CVE-2023-3214", which is classified as critical, is a use-after-free (UAF) vulnerability in the autofill payments component. The risk factors categorised as high relate to AF vulnerabilities in WebRTX and WebXR as well as a type mix-up in the Javascript engine V8. Information on the fifth vulnerability is missing.
What do I have to do as a user?
Actually nothing. Chrome normally updates itself automatically as soon as a new version is available. However, if you want to check and make sure, you can look directly in the menu. To do this, click on the "⋮" icon to the right of the address bar of your Chrome browser and follow the path via "Help" and "About Google Chrome". The version of the web browser you are currently using is displayed here. If an update is available, you can start the update process manually there.
Other Chromium-based browsers such as Brave, Microsoft Edge, Opera and Vivaldi are also likely to follow suit with their updates soon. Users should install these as soon as possible.
Cover photo: photosince/Shutterstock
