Google updates Chrome to squash actively exploited WebRTC Zero Day
Google has issued an unexpected update to its Chrome browser to address a zero-day WebRTC flaw that is actively being exploited.
The culprit is CVE-2022-2294, and is a problem in WebRTC – the code that imbues browsers with real-time comms capabilities. Details of the flaw, number 1341043, are not currently detailed in the Chromium project bug log, and details of the CVE have not been published at the time of writing. But Google'sof a new browser version describes it as:"Heap buffer overflow in WebRTC. Reported by Jan Vojtesek from the Avast Threat Intelligence team on 2022-07-01."
The fix is installing Chrome 103.0.5060.114 for Windows and Chrome 103.0.5060.71 for Android, both of which will appear soon. Google says the flaw is under active attack, but offers no insight into how one might detect it or defend against it other than by updating Chrome. Given the nature and purpose of WebRTC, it's probably best not to use browser-based comms tools until you can update.CVE-2022-2295, a type confusion in the V8 JavaScript engine used in Chrome;
Ireland Latest News, Ireland Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Live news updates: A week of independence days\n\t\t\tExpert insights, analysis and smart data help you cut through the noise to spot trends,\n\t\t\trisks and opportunities.\n\t\t\n\t\tJoin over 300,000 Finance professionals who already subscribe to the FT.
Read more »
Apple Prime Day deals 2022: early savings on iPads, MacBooks and more!Find the best early Apple Prime Day deals, including iPad and MacBook Prime Day discounts.
Read more »
Minions: The Rise of Gru is so bad I wanted to squash the little pestsThese yellow mischief-makers are best enjoyed in small doses Review: ⭐⭐
Read more »
Former Ulster rugby star unable to walk after horror motocross accident'He's in terrible pain all day every day and it's starting to get to him.'
Read more »
Newcastle United live TV matches announcement imminent - 7 Premier League games updateNewcastle United live TV matches announcement imminent - 7 Premier League games update nufc
Read more »
Alejandro Valverde in hospital after hit-and-run incident during trainingUPDATE: 69-year-old man arrested — driver handed himself in to police at La Alberca station following the incident yesterday cycling
Read more »