Google urgently updates Chrome to deal with severe zero-day vulnerabilities, sixth zero-day patch in 2022



On September 2, 2022, Google released 'Chrome 105.0.5195.102' for Windows, Mac, and Linux users. This update addresses the zero-day vulnerability '

CVE-2022-3075 '.

Chrome Releases: Stable Channel Update for Desktop
https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html

Google Chrome emergency update fixes new zero-day used in attacks
https://www.bleepingcomputer.com/news/security/google-chrome-emergency-update-fixes-new-zero-day-used-in-attacks/

CVE-2022-3075 is a vulnerability caused by a flaw in data validation in the library 'Mojo' used for interprocess communication. An anonymous researcher reported this vulnerability on August 30, 2022, but Google says it has already been exploited.

Google says the update will be rolled out to users in the coming days or weeks. You can check the update status by selecting 'About Chrome' from Chrome's settings.



The zero-day vulnerabilities discovered in 2022 are 'CVE-2022-0609' on February 14th, ' CVE-2022-1096 ' on March 25th, ' CVE-2022-1364 ' on April 14th, 7 'CVE-2022-2294' on May 4th and ' CVE -2022-2856 ' on August 17th. In particular, it has been revealed that the February vulnerability was exploited by North Korean-backed hackers.

It turns out that a North Korean hacker group was exploiting Chrome's zero-day vulnerability ``CVE-2022-0609''-GIGAZINE



in Software,   Security, Posted by log1p_kr