Summary:
Google has released Chrome 103.0.5060.114 for Windows users to address a high-severity zero-day vulnerability exploited by attackers in the wild, the fourth Chrome zero-day patched in 2022. Google is aware that an exploit for CVE-2022-2294 exists in the wild. the browser vendor explained in a security advisory published on Monday. The 103.0.5060.114 version is rolling out worldwide in the Stable Desktop channel. This update was available immediately when researchers checked for new updates by going into Chrome menu > Help > About Google Chrome. The zero-day bug (tracked as CVE-2022-2294) is a high severity heap-based buffer overflow weakness in the WebRTC (Web Real-Time Communications) component, reported by Threat Intelligence team.[/subscribe_to_unlock_form]
Summary:
Google has released Chrome 103.0.5060.114 for Windows users to address a high-severity zero-day vulnerability exploited by attackers in the wild, the fourth Chrome zero-day patched in 2022. Google is aware that an exploit for CVE-2022-2294 exists in the wild. the browser vendor explained in a security advisory published on Monday. The 103.0.5060.114 version is rolling out worldwide in the Stable Desktop channel. This update was available immediately when researchers checked for new updates by going into Chrome menu > Help > About Google Chrome. The zero-day bug (tracked as CVE-2022-2294) is a high severity heap-based buffer overflow weakness in the WebRTC (Web Real-Time Communications) component, reported by Threat Intelligence team.[emaillocker id="1283"]
It is highly recommended to upgrade all Chrome browsers to latest version to mitigate the vulnerability.
References:
The following reports contain further technical details:
[/emaillocker]