Google Chrome Vulnerabilities

 

In today’s SensCy Cyber Alert, your SensCy team recommends Google Chrome Browser users to install the new Chrome Version immediately. The new update patches 27 specific Google Chrome vulnerabilities that could compromise user safety.

Multiple security flaws have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these Google Chrome vulnerabilities could allow for arbitrary code execution in the context of the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

The impact of these threats varies by account configuration. Users whose accounts are configured to have fewer user rights on the system could be less impacted by Google Chrome vulnerabilities than those who operate with administrative user rights.

To ensure protection against these Google Chrome vulnerabilities, below are the new available updates you should look for:

  • Windows and Mac: Chrome prior to 127.0.6533.72/73
  • Linux: Chrome prior to 127.0.6533.72

Key Takeaways

  • Urgent Update Required: Google Chrome users must install the latest update immediately to address 27 new security flaws.
  • Severe Risk Profile: The most critical vulnerabilities allow for arbitrary code execution, which lets attackers view, change, or delete data on your device.
  • Admin Accounts at Risk: Users operating with full administrative rights are more susceptible to severe system compromise than those with restricted user privileges.
  • Affected Versions: The update applies to Chrome versions prior to 127.0.6533.72/73 for Windows/Mac and 127.0.6533.72 for Linux.

How to check for new updates:

For new Google Chrome updates, follow these steps:

  1. On your computer, open Chrome.
  2. At the top right, click the ellipsis (…).
  3. Click Help and then About Google Chrome.
  4. Click Update Google Chrome.

Important: If your Chrome browser is up-to-date, you will see a blue check mark and the words “Chrome is up to date.”

Frequently Asked Questions (FAQ)

1. What does “Arbitrary Code Execution” mean?

Arbitrary code execution is a security flaw that allows a cybercriminal to run any command or code they choose on your computer. This effectively gives them the same control over your machine that you have, allowing them to steal data or install malware without your permission.

2. Why are administrative users at higher risk?

If a hacker exploits a vulnerability while you are logged in as an administrator, they inherit those administrative rights. This allows them to make deep system changes, such as creating new backdoors or deleting system files. Standard users have limited permissions, which limits the damage a hacker can do.

3. Does this update fix “Zero-Day” exploits?

While this specific alert notes 27 vulnerabilities, it does not explicitly label them as “zero-days” (attacks already happening in the wild). However, patching 27 vulnerabilities is a significant security event, suggesting a high preventative priority.

4. How often should I check for Chrome updates?

Google Chrome usually updates automatically in the background. However, it is good practice to manually check once a week, or immediately upon hearing about a major security alert like this one, to ensure the update has been applied and the browser has been restarted.

If you need additional assistance, use this Google Chrome link.