Google discloses Chrome browser zero-day exploited in the wild

Topic

New Reply

On Halloween night, Google discloses Chrome zero-day exploited in the wild
On Halloween, Google releases Chrome 78.0.3904.87 to patch a Chrome zero-day discovered by Kaspersky exploited in the wild.

By Catalin Cimpanu | November 1, 2019

 
Yesterday, on late Halloween night, Google engineers delivered the best scare of the evening and released an urgent update for the Chrome browser to patch an actively exploited zero-day.

“Google is aware of reports that an exploit for CVE-2019-13720 exists in the wild,” Google engineers said in a blog post announcing the new v78.0.3904.87 release.

The actively-exploited zero-day was described as a use-aster-free bug in Chrome’s audio component.
…
Chrome 78.0.3904.87 is available for Windows, Mac, and Linux. The release will slowly roll out to all Chrome users in the coming weeks but users can trigger a manual update right now by visiting the browser’s Help > About Google Chrome section.

 
Read the full article here

2 users thanked author for this post.

jburk07, OscarCP

Reply | Quote

Replies

Kirsty, Thanks for this very timely and very necessary notice! I do use Chrome now and then, for various pressing and ineluctable reasons, although my default and most used browser, by far, these days, is Waterfox. But there are Web sites where this browser is either resented or blacklisted outright for reasons too arcane for me to understand. Because those very sites do welcome Chrome!

Now, as I write this using Waterfox, I have Chrome up and running as well, to let it update itself with this urgently needed patch.

Ex-Windows user (Win. 98, XP, 7); since mid-2017 using also macOS. Presently on Monterey 12.15 & sometimes running also Linux (Mint).

MacBook Pro circa mid-2015, 15" display, with 16GB 1600 GHz DDR3 RAM, 1 TB SSD, a Haswell architecture Intel CPU with 4 Cores and 8 Threads model i7-4870HQ @ 2.50GHz.
Intel Iris Pro GPU with Built-in Bus, VRAM 1.5 GB, Display 2880 x 1800 Retina, 24-Bit color.
macOS Monterey; browsers: Waterfox "Current", Vivaldi and (now and then) Chrome; security apps. Intego AV

Reply | Quote