Google Chrome Vulnerabilities

Key Takeaways

  • Immediate Update Required: Google Chrome users must update to the latest version immediately to patch 5 new security flaws.
  • Severe Risk Factor: The most critical vulnerabilities allow for arbitrary code execution, enabling hackers to install programs or delete data.
  • Account Privilege Warning: Users operating with full administrative rights face a higher risk of system compromise than those with restricted permissions.
  • Version Specifics: The secure versions are 128.0.6613.137/.138 for Windows/Mac and 128.0.6613.137 for Linux.

Google Chrome Vulnerabilities: Security Update Alert

In today’s SensCy Cyber Alert, your SensCy team recommends Google Chrome Browser users to install the new Chrome Version immediately. The new update includes 5 security fixes targeting specific Google Chrome vulnerabilities.

Multiple security flaws have been discovered in the browser, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these Google Chrome vulnerabilities could allow for arbitrary code execution in the context of the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

The level of risk often depends on account configuration. Users whose accounts are configured to have fewer user rights on the system could be less impacted by Google Chrome vulnerabilities than those who operate with administrative user rights.

To protect your organization against these Google Chrome vulnerabilities, please verify you are running the following versions:

  • Windows and Mac: Chrome prior to 128.0.6613.137/.138
  • Linux: Chrome prior to 128.0.6613.137

How to check for new updates:

For new Google Chrome updates, follow these steps:

  1. On your computer, open Chrome.
  2. At the top right, click the ellipsis (…).
  3. Click Help and then About Google Chrome.
  4. Click Update Google Chrome.

Important: If your Chrome browser is up-to-date, you will see a blue check mark and the words “Chrome is up to date.”

Frequently Asked Questions (FAQ)

1. What is “Arbitrary Code Execution”?

Arbitrary code execution is a security vulnerability that allows a hacker to run any command or code of their choice on your computer. This effectively gives them control over your system, allowing them to steal passwords, install ransomware, or spy on your activity.

2. Why does the update fix 5 vulnerabilities if they aren’t all “critical”?

Even lower-severity vulnerabilities can be chained together by attackers to gain access to a system. Google bundles these fixes into updates to ensure comprehensive protection. It is best practice to patch all known issues, regardless of individual severity ratings.

3. What is the difference between an “Admin” and a “Standard” user?

An “Admin” (Administrator) has full control over the computer, including installing software and modifying system files. A “Standard” user can only use installed software and change personal settings. If a Standard user is hacked, the attacker is trapped within that limited account. If an Admin is hacked, the attacker owns the whole machine.

4. How do I know if the update worked?

After you click “Update Google Chrome,” you must restart the browser for the changes to take effect. Once restarted, go back to the “About Google Chrome” page. If the version number matches 128.0.6613.137/.138 (or higher) and you see a blue checkmark, you are protected.

If you need additional assistance, use this Google Chrome link.