Google Chrome: eighth zero-day of the year patched
Google has released an emergency security update for Chrome. It fixes a new vulnerability that was already exploited in zero-day attacks. According to the source, it is the eighth such flaw since the start of the year.
Checked in Shield: no
Who is affected
Affected versions are not stated in the source. The CVE id and the vulnerability type are not disclosed yet. It is only known that exploitation in attacks has already occurred.
How to check
Open chrome://settings/help and compare your version with the fixed one in Google's announcement. On Linux, check chromium with: apt list --upgradable.
How to fix
A patch is available in the emergency Chrome update. Install it and restart the browser. For chromium on Debian, watch the security tracker, run apt update and upgrade the package when it appears.
What Shield checks not checked
Checked in Shield: no. This is usually not visible from outside, or the check has not been added yet; we collect such cases and add checks in batches.
Good to know
The CVE id and the affected and fixed versions are not disclosed in the source. Source: BleepingComputer.
