Google’s Threat Analysis Group has revealed troubling news: a new ‘zero-day’ vulnerability noted as CVE-2022-1099, discovered in Google’s very own Chrome browser.<\/p>\n
As a zero-day exploit, the troubling aspect of this vulnerability is that it was undisclosed until now, meaning it may have been exploited in the real-world before Google researchers identified the issue.<\/p>\n
A zero-day vulnerability is a software weakness unknown to those who should be interested in its mitigation – including, notably, the vendor.<\/p>\n
Upon identification, the vulnerability is thus zero days old.<\/p>\n
Because these exploitable bugs exist within systems undetected for some period, they provide potential attackers a window of opportunity.<\/p>\n
In an official Google blog post<\/a>, the vulnerability was classified as a type confusion vulnerability in the V8 JavaScript engine\u2014an integral part of the Chrome browser.<\/p>\n Type confusion vulnerabilities occur when the code does not verify the type of object that is passed to it, and it can result in logical errors, allowing hackers to exploit and infiltrate systems.<\/p>\n While Google’s policy is to provide limited details regarding vulnerabilities until a majority of Chrome users have updated their browsers, they did confirm this vulnerability is being actively exploited in the wild.<\/p>\n Upon discovery of this vulnerability, Google immediately released a browser update to the stable channel (version 99.0.4844.84 for Windows, Mac and Linux) that patches the security hole.<\/p>\n Users are strongly encouraged to apply this update as soon as possible to resolve the security flaw and protect against potential exploits.<\/p>\n IT and security professionals can ensure updates are deployed across their organizations promptly to prevent any potential exploitation.<\/p>\n In addition, organizations should emphasize security awareness among their workforce and use threat detection technology to quickly identify and mitigate potential risk.<\/p>\n This recent detection underscores the relentless work of the cybersecurity community and the constant race to stay ahead of malicious actors.<\/p>\n With software code becoming increasingly complex and expansive, the likelihood of overlooked or unknown vulnerabilities remains significant.<\/p>\n Google Researchers Find New Chrome Zero-Day Google’s Threat Analysis Group has revealed troubling news: a<\/p>\n","protected":false},"author":1,"featured_media":3492,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2,5],"tags":[],"class_list":["post-3491","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-news","pmpro-has-access"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3491","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/comments?post=3491"}],"version-history":[{"count":1,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3491\/revisions"}],"predecessor-version":[{"id":3494,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3491\/revisions\/3494"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media\/3492"}],"wp:attachment":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media?parent=3491"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/categories?post=3491"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/tags?post=3491"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}Protecting against the Zero-Day<\/h2>\n
Final Thoughts<\/h2>\n
Follow-Up Reading<\/h2>\n
\n