Google Chrome New Update

In today’s SensCy Cyber Alert, your SensCy team recommends Google Chrome Browser users to install the new Chrome Version immediately. Staying current is the only way to protect your network against the latest Google Chrome vulnerabilities.

The new update, Chrome 109, will be rolled out to consumers on January 12, 2023, and is available to Windows, Mac, and Linux users (Versions: Chrome 109.0.5414.74 for Linux, 109.0.5414.74/.75 for Windows, and 109.0.5414.87 for Mac).

There are no zero days addressed in the new update, but it does include 17 security fixes. These patches are critical for managing Google Chrome vulnerabilities that could expose users to attacks. The update includes two fixes considered HIGH Severity:

• CVE-2023-0128: A use-after-free issue in Chrome’s overview mode, a common flaw found in Google Chrome vulnerabilities.
• CVE-2023-0129: A heap buffer overflow vulnerability in the network service. Prompt patching is the best defense against these types of Google Chrome vulnerabilities.

Key Takeaways

• • Immediate Action Required: Google has released Chrome version 109 to address security flaws; users on Windows, Mac, and Linux should update immediately.
  • Critical Security Fixes: The update resolves 17 vulnerabilities, including two “High Severity” issues (CVE-2023-0128 and CVE-2023-0129) that could compromise system stability and security.
  • Simple Verification: Users can ensure they are protected by navigating to the “Help” menu and selecting “About Google Chrome” to trigger the automatic update.

How to check for new updates:

For new Google Chrome updates, follow these steps:

1. On your computer, open Chrome
2. At the top right, click the ellipsis
3. Click Help and then About Google Chrome
4. Click Update Google Chrome

Important: If your Chrome browser is up-to-date, you will see a blue check mark and the words “Chrome is up to date.”

Frequently Asked Questions (FAQ)

1. Why is this Chrome update important?

This update patches 17 specific security flaws. While there are no “zero-day” exploits (attacks currently happening in the wild), two of the vulnerabilities are rated High Severity, meaning they could allow attackers to execute code or crash your browser if left unpatched.

2. How do I know if I have the correct version?

Go to the top right corner of your browser, click the three dots, select “Help,” and then “About Google Chrome.” The page will display your version number. You should look for version 109.0.5414.xx or higher depending on your operating system.

3. What is a “use-after-free” vulnerability?

A use-after-free vulnerability (like CVE-2023-0128 fixed in this update) occurs when a program tries to use memory after it has been freed or deleted. Hackers can exploit this confusion to pass arbitrary code to the computer or cause the application to crash.

4. Do I need to restart my browser after updating?

Yes. Chrome downloads the update in the background, but the new security patches do not take effect until you close and relaunch the browser.

If you need additional assistance, use this Google Chrome link