Monday 19th July 2021. Google have released a security update to address critical vulnerabilities in the Chrome Browser. Latest guidance from Quorum Cyber.

What is it?

Google have released a security update to address a series of critical vulnerabilities in the Chrome Browser. There are reports that some of these are being actively exploited in the wild.

In the past few months there have been a string of high severity bugs found in Chrome so it’s important to be using the most recent version available.

What is the impact?

A malicious web page could use a browser exploit to run code on the host machine. Google have not released detailed info on the most recent attack and will hold off until a majority of users are updated with a fix. Security company, Kaspersky, has previously reported the threat actor, PuzzleMaker, using Chrome and Windows 10 exploits to deploy malware in targeted attacks against companies worldwide.

Are my systems vulnerable?

You can see which version of Chrome you are running in the About tab of the settings page.

Navigate your browser to: chrome://settings/help

The most recent version as of 2021-07-16 is 91.0.4472.164

How do I mitigate this threat?

If you’re running an older version, then Chrome should update itself automatically on next launch. The About page can be used to manually update and this requires a relaunch of the browser.

Further Information

Stable Channel Update for Desktop