Update Google Chrome now to fix this dangerous zero-day flaw
It’s time to update your Chrome desktop browser on Mac, Windows or Linux once again to fix a dangerous “zero-day” flaw that is already being used to attack computer users.
Few details are yet available about the zero-day flaw. Google’s Chrome blog post yesterday (July 15) notes that it involves “type confusion in V8,” the JavaScript rendering engine used by Chrome, and that “Google is aware of reports that an exploit for CVE-2021-30563 [the flaw’s catalogue number] exists in the wild.”
This is the eighth zero-day flaw patched in Chrome this year, according to Bleeping Computer.
Earlier this week, Google researchers said a “commercial surveillance company” had developed exploits for two of the older Chrome zero-days and sold them to nation-state intelligence agencies. A day later, Microsoft and the University of Toronto’s Citizen Lab identified the company as Israeli spyware firm Candiru and said its customers were in the Middle East and the former Soviet Union.
Chrome 91.0.4472.164 patches seven other flaws, two others of which involve vulnerabilities in V8. Most of the flaws are categorized as being “high” severity, indicating that remote-code-execution — hacking over the internet — is possible.
How to update Chrome
To update Chrome on Windows and Mac, try closing and relaunching your browser. If that doesn’t work, click the three vertical dots at the top right of the browser window. Scroll down and mouse over Help, then click About Google Chrome.
