Home > News > Vulnerabilities > Google Chrome Zero Day Patched

Google Chrome Zero Day Patched

News, Vulnerabilities | 30 March, 2022 | 0

Google has released a patch for a zero day exploit in Google Chrome – the second zero day patched so far this year.

Tracked as CVE-2022-1096, this High severity Type Confusion vulnerability was reported on 23^rd March and a patch was released just 48 hours later. Google is aware that an exploit exists in the wild, hence the rapid response.

The vulnerability is fixed in Google Chrome 99.0.4844.84 on Windows, Mac and Linux. Other browsers that are based on Chromium will also need updating to fix this issued; Microsoft Edge fixes this issue in version 99.0.1150.55

Even with automatic updated turned on, you may need to nudge Chrome to update by checking its version number by clicking Settings -> About Chrome on Windows or Chrome -> About Chrome on Mac.

This is the second zero day vulnerability patched in Chrome this year. In February a use after free vulnerability (CVE-2022-0609) was patched after it was observed being used by a North Korean based attacker group.

cyber security news, web browsers

ZuoRAT Malware Targets Home-Office Routers

By Mark Faithfull

A multistage remote access trojan (RAT), known as ZuoRAT, has been specifically developed to attack small office/home office (SOHO) routers. These devices have been more frequently used for work since the increase in home-working inRead more
Microsoft Patches Linux Cluster Bug

By Mark Faithfull

The Microsoft Security Response Centre released a blog post this week about a Service Fabric (SF) Linux Cluster vulnerability. This bug has been identified on both Linux and Windows operating systems, however Microsoft claims only LinuxRead more
Vulnerability reported on QNAP NAS Devices

By Mark Faithfull

A Security Advisory was published by QNAP on Wednesday to advise their customers of the status of Remote Code Execution vulnerability that affects many of their products. The vulnerability is in the versions of PHPRead more
Cisco Small Business Routers Vulnerable to Attack

By Mark Faithfull

A zero-day vulnerability with a critical 9.8/10 severity rating has been identified in four Cisco Small Business RV Series Routers. These vulnerable products are RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPNRead more
New Hard to Detect Linux Threat Discovered

By Mark Faithfull

A new Linux backdoor threat has been discovered, using malware known as ‘Symbiote’. This name has come from its ability to hide itself well, whilst stealing data and credentials from the ‘host’ victim. A threatRead more