Google Chrome Vulnerabilities

Key Takeaways

  • Urgent Update: Google Chrome users should update to version 129.0.6668.70/.71 immediately to patch 4 new security flaws.
  • Critical Risk: The most severe vulnerabilities allow attackers to execute arbitrary code, potentially granting them full control over the system.
  • User Privilege Warning: Accounts with administrative rights are at significantly higher risk of severe compromise than those with restricted permissions.
  • Target Versions: Secure versions include Chrome 129.0.6668.70/.71 for Windows/Mac and 129.0.6668.70 for Linux.

In today’s SensCy Cyber Alert, your SensCy team recommends Google Chrome Browser users to install the new Chrome Version immediately. The new update includes 4 security fixes designed to mitigate known Google Chrome vulnerabilities.

Multiple security flaws have been discovered in the browser, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these Google Chrome vulnerabilities could allow for arbitrary code execution in the context of the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.

The potential damage often depends on how the user account is set up. Users whose accounts are configured to have fewer user rights on the system could be less impacted by these Google Chrome vulnerabilities than those who operate with administrative user rights.

Below are the new available updates to address these Google Chrome vulnerabilities:

  • Windows and Mac: Chrome prior to 129.0.6668.70/.71
  • Linux: Chrome prior to 129.0.6668.70

How to check for new updates:

For new Google Chrome updates, follow these steps:

  1. On your computer, open Chrome.
  2. At the top right, click the ellipsis (…).
  3. Click Help and then About Google Chrome.
  4. Click Update Google Chrome.

Important: If your Chrome browser is up-to-date, you will see a blue check mark and the words “Chrome is up to date.”

Frequently Asked Questions (FAQ)

1. What does “Arbitrary Code Execution” mean?

Arbitrary code execution is a high-severity security flaw that allows an attacker to run any command they choose on your computer. This can lead to them installing malware, stealing sensitive data, or taking complete control of your system remotely.

2. Why are administrative accounts more vulnerable?

If an attacker exploits a vulnerability on an account with administrative privileges, they inherit those same rights. This means they can make deep system changes, such as modifying security settings or creating new backdoors. Standard user accounts have restricted permissions, which limits the scope of damage an attacker can do.

3. How often should I check for Chrome updates?

Ideally, you should check for updates whenever a security alert is issued. However, Chrome is designed to check for updates automatically in the background. It is good practice to manually verify your version once a week or immediately after reading a cyber alert like this one.

4. Do I need to restart my browser after updating?

Yes. Downloading the update is only the first step. The security patches do not take effect until the browser has been fully restarted. If you leave Chrome open for days without restarting, you remain vulnerable even if the update has been downloaded.

If you need additional assistance, use this Google Chrome link.