Google Chrome Vulnerability: Here

Google Chrome Vulnerability: Here's How to Fix It

Google has discovered a Zero-Day Vulnerability [CVE-2019-5786] that is being exploited by bad actors. If you are a Chrome user, you are at risk. Make sure your browser has been updated to the latest patched version [72.0.3626.121], which fixes the vulnerability.

Google has discovered a Zero-Day Vulnerability [CVE-2019-5786] that is being exploited by bad actors. If you are a Chrome user, you are at risk. Make sure your browser has been updated to the latest patched version [72.0.3626.121], which fixes the vulnerability.

Google posted an update last week addressing security vulnerability that hackers were exploiting in the wild. “Google is aware of reports that an exploit for CVE-2019-5786 exists in the wild,” the report read.

Justin Schuh, Google Chrome's security lead and engineering director, warned users to immediately update Chrome browser after the critical bug was discovered. “Also, seriously, update your Chrome installs... like right this minute. #PSA,” Schuch tweeted.

The vulnerability, which affects the browser in Windows, Mac, and Linux, was reported by Clement Lecigne of Google’s Threat Analysis Group on February 27.

What are zero-day vulnerabilities?

A zero-day or 0day vulnerability is a bug or flaw in a code that has been discovered and disclosed but not yet patched. You can also call them unknown vulnerabilities, because they aren’t discovered by software vendors until the software has already been released.

Once a bug is discovered, software vendors have a very limited time (zero days) in which they need to fix the issue. Until they release a patch, it is considered a “zero day” vulnerability. If there is exploit code available for that vulnerability, it’s a “zero day” exploit, with “zero” referring to the number of days since a patch has been available to the public.

Why it is important to update your browser?

Google Chrome 72.0.3626.121 addresses CVE-2019-5786, a Use-After-Free (UAF) vulnerability in FileReader, an application programming interface (API) included in browsers to allow web applications to read the contents of files stored on a user’s computer.

How to update your Chrome browser

To patch this vulnerability, you just need to update your chrome browser by following these quick steps:

  1. Open your browser and type, chrome://settings/help
  2. Click Relaunch

After relaunch, Google will show you the updated version which is 72.0.3626.121

How to stay safe from future vulnerabilities

In the world of cyber criminals, you can’t be 100 percent safe. However, there are still some actions you can take immediately if the same thing happens in future with any software.

  1. Keep software and security patches up to date by downloading the latest software releases and updates.
  2. Keep your system up-to-date.
  3. Establish safe and effective personal online security habits.
  4. Configure security settings for your operating system.
  5. Install a proactive and comprehensive security software to help block known and unknown threats to vulnerabilities.

About the Author

Susan Alexandra is a small business owner, traveler and investor of cryptocurrencies.

Featured

  • Data Driven, Proactive Response

    As cities face rising demands for smarter policing and faster emergency response, Real Time Crime Centers (RTCCs) are emerging as essential hubs for data-driven public safety. In this interview, two experts with deep field experience — Ross Bourgeois of New Orleans and Dean Cunningham of Axis Communications — draw on decades of operational, leadership and technology expertise to share how RTCCs are transforming public safety through innovation, interagency collaboration and a relentless focus on community impact. Read Now

  • Integration Imagination: The Future of Connected Operations

    Security teams that collaborate cross-functionally and apply imagination and creativity to envision and design their ideal integrated ecosystem will have the biggest upside to corporate security and operational benefits. Read Now

  • Smarter Access Starts with Flexibility

    Today’s workplaces are undergoing a rapid evolution, driven by hybrid work models, emerging smart technologies, and flexible work schedules. To keep pace with growing workplace demands, buildings are becoming more dynamic – capable of adapting to how people move, work, and interact in real-time. Read Now

  • Trends Keeping an Eye on Business Decisions

    Today, AI continues to transform the way data is used to make important business decisions. AI and the cloud together are redefining how video surveillance systems are being used to simulate human intelligence by combining data analysis, prediction, and process automation with minimal human intervention. Many organizations are upgrading their surveillance systems to reap the benefits of technologies like AI and cloud applications. Read Now

  • Right-Wing Activist Charlie Kirk Dies After Utah Valley University Shooting

    Charlie Kirk, a popular conservative activist and founder of Turning Point USA, died Wednesday after being shot during an on-campus event at Utah Valley University in Orem, Utah Read Now

New Products

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.

  • FEP GameChanger

    FEP GameChanger

    Paige Datacom Solutions Introduces Important and Innovative Cabling Products GameChanger Cable, a proven and patented solution that significantly exceeds the reach of traditional category cable will now have a FEP/FEP construction.

  • HD2055 Modular Barricade

    Delta Scientific’s electric HD2055 modular shallow foundation barricade is tested to ASTM M50/P1 with negative penetration from the vehicle upon impact. With a shallow foundation of only 24 inches, the HD2055 can be installed without worrying about buried power lines and other below grade obstructions. The modular make-up of the barrier also allows you to cover wider roadways by adding additional modules to the system. The HD2055 boasts an Emergency Fast Operation of 1.5 seconds giving the guard ample time to deploy under a high threat situation.