Google Rolls Out Chrome 103 with Urgent Fix for WebRTC Zero-Day Flaw
Google is rolling out an urgent patch to Chrome users on desktop and Android devices to address a zero-day flaw the web giant says is being actively exploited.
“The Stable channel has been updated to 103.0.5060.114 for Windows, which will roll out over the coming days/weeks,” writes Prudhvikumar Bommana for the Google Chrome team.
Four security flaws are addressed in this release, including one affecting the browser’s open-source real-time communication component, WebRTC.
The vulnerability, tracked as CVE-2022-2294, is described as a heap buffer overflow.
“Google is aware that an exploit for CVE-2022-2294 exists in the wild,” according to the advisory.
Two more bugs are also rated high-severity, making the update all the more important from a security standpoint.
In typical fashion, the internet mammoth is holding off details of the zero-day, giving Chrome users time to patch up before more malicious actors catch on and exploit the flaw. Android users are also instructed to update to Chrome 103, as most of the same flaws affect the mobile version of the browser. iOS customers seem unaffected at this time.
Chrome users worldwide should make updating a priority or, at the very least, refrain from real-time chats via Chrome until they update.
What is medical identity theft and how to protect against it
July 27, 2022
Identifying and Dealing with Online Bullying Is Not Impossible - School Presentation Inside
June 28, 2022
Let’s Celebrate World Social Media Day by Improving Your Privacy and Security Online
June 28, 2022
Bitdefender Reveals the Top Cyber Threats Faced by Consumers in 2021
June 22, 2022
Scam alert: Cybercrooks use shady investment domain to scam keen investors out of money and data
May 24, 2022