A Google Chrome bug of the worst variety has been discovered: Not only is it dangerous, but it’s actively being exploited by hackers.
Google released a fix earlier this week, meaning an update is available, which will bring your Chrome to version 104.0.5112.101 on Mac and Linux and version 104.0.5112.102/101 on Windows. It should be automatically installed on your Chrome, but if it hasn’t, you can (and should) initiate the update now, by going to Chrome’s “About” menu.
The company didn’t release a whole lot of info about the most critical issue (which is one of 11 security fixes that come with this update) as it typically restricts bug details until most users have updated their software.
We do know, however, that it has to do with “insufficient validation of untrusted input in Intents,” which, according to Dark Reading, could lead to a malicious website executing arbitrary code on your machine, among other problems.
Here’s the scary part, though: Google says that it’s “aware that an exploit for CVE-2022-2856 exists in the wild.” That means that there are hackers out there using this bug for nefarious purposes, which is why you should update your Chrome as soon as possible.
