Attention Google Chrome users: your phone and laptop are at risk of losing personal data, so update now

Attention Google Chrome users: your phone and laptop are at risk of losing personal data, so update now

Google has recently released a critical security update for its Chrome browser across macOS, Windows, and Linux. This update is designed to address a zero-day vulnerability identified as CVE-2023-6345, which has been confirmed to be actively exploited in the wild. This vulnerability could allow attackers to gain control of affected devices. Google has urged all Chrome users to update their browsers immediately.

Google has not provided further details about the CVE-2023-6345 exploit, which was discovered last week by security researchers in Google’s Threat Analysis Group (TAG). This cautious approach is common among tech companies, as detailed information could potentially aid attackers in exploiting vulnerable Chrome installations. According to the report by Android Central, the duration of active exploitation prior to detection remains unknown.

What is the threat 

What is known, however, is that CVE-2023-6345 is an integer overflow weakness affecting Skia, the open-source 2D graphics library embedded within the Chrome graphics engine. The exploit, as detailed in the macOS update notes (version 119.0.6045.199), enabled at least one attacker to potentially execute a sandbox escape via a malicious file. A sandbox escape poses a critical threat as it could lead to arbitrary code execution and data theft, compromising the security of the Chrome browser and the user’s sensitive information.

If exploited, CVE-2023-6345 carries significant risk implications. Successful attacks could result in unauthorised access to sensitive user data, potentially leading to data manipulation and other cyber threats.

How to stay safe

As the details of the exploit remain undisclosed, users are urged to treat this security update with the utmost urgency to mitigate potential risks associated with the vulnerability. Google has already released the fix for the vulnerability and users are asked to update their browsers. “The Stable channel has been updated to 119.0.6045.199 for Mac and Linux and 119.0.6045.199/.200 for Windows, which will roll out over the coming days/weeks,”reads the official blog.

For users who have opted for automatic updates in their Chrome browsers, no immediate action is necessary. Chrome will auto update to the latest version, incorporating the required security patch. However, users with automatic updates disabled or those seeking immediate protection are strongly advised to manually initiate an update. The recommended version for macOS is 119.0.6045.199.

Update Google Chrome 

To manually update Chrome, follow these steps:

• Access Chrome settings.
• Click on the “About Chrome” tab.
• Locate and click on the “Update Google Chrome” option.
• If the update option is not visible, it indicates that the browser is already on the latest version.

Google has further assured users that the fix will be gradually implemented over the upcoming days or weeks. This phased rollout might result in the update not being immediately accessible to all users at the time of this writing. Nonetheless, given the potential risks posed by CVE-2023-6345, users are strongly encouraged to maintain vigilance and apply the update as soon as it becomes available to safeguard the security of their browsing experience.

Also Read | Elon Musk receiving mass resignation from X employees after giving bonus, and no money is not the problemAlso Read | 4 upcoming Apple iPhone 16 updates we are most excited aboutAlso Read | Go f—- yourself, says Elon Musk in a post on X to brands like Apple that are pulling ads from the platform