Google Chrome Vulnerability: Here

Google Chrome Vulnerability: Here's How to Fix It

Google has discovered a Zero-Day Vulnerability [CVE-2019-5786] that is being exploited by bad actors. If you are a Chrome user, you are at risk. Make sure your browser has been updated to the latest patched version [72.0.3626.121], which fixes the vulnerability.

  • By Susan Alexandra
  • Mar 08, 2019

Google has discovered a Zero-Day Vulnerability [CVE-2019-5786] that is being exploited by bad actors. If you are a Chrome user, you are at risk. Make sure your browser has been updated to the latest patched version [72.0.3626.121], which fixes the vulnerability.

Google posted an update last week addressing security vulnerability that hackers were exploiting in the wild. “Google is aware of reports that an exploit for CVE-2019-5786 exists in the wild,” the report read.

Justin Schuh, Google Chrome's security lead and engineering director, warned users to immediately update Chrome browser after the critical bug was discovered. “Also, seriously, update your Chrome installs... like right this minute. #PSA,” Schuch tweeted.

The vulnerability, which affects the browser in Windows, Mac, and Linux, was reported by Clement Lecigne of Google’s Threat Analysis Group on February 27.

What are zero-day vulnerabilities?

A zero-day or 0day vulnerability is a bug or flaw in a code that has been discovered and disclosed but not yet patched. You can also call them unknown vulnerabilities, because they aren’t discovered by software vendors until the software has already been released.

Once a bug is discovered, software vendors have a very limited time (zero days) in which they need to fix the issue. Until they release a patch, it is considered a “zero day” vulnerability. If there is exploit code available for that vulnerability, it’s a “zero day” exploit, with “zero” referring to the number of days since a patch has been available to the public.

Why it is important to update your browser?

Google Chrome 72.0.3626.121 addresses CVE-2019-5786, a Use-After-Free (UAF) vulnerability in FileReader, an application programming interface (API) included in browsers to allow web applications to read the contents of files stored on a user’s computer.

How to update your Chrome browser

To patch this vulnerability, you just need to update your chrome browser by following these quick steps:

  1. Open your browser and type, chrome://settings/help
  2. Click Relaunch

After relaunch, Google will show you the updated version which is 72.0.3626.121

How to stay safe from future vulnerabilities

In the world of cyber criminals, you can’t be 100 percent safe. However, there are still some actions you can take immediately if the same thing happens in future with any software.

  1. Keep software and security patches up to date by downloading the latest software releases and updates.
  2. Keep your system up-to-date.
  3. Establish safe and effective personal online security habits.
  4. Configure security settings for your operating system.
  5. Install a proactive and comprehensive security software to help block known and unknown threats to vulnerabilities.

About the Author

Susan Alexandra is a small business owner, traveler and investor of cryptocurrencies.

Featured

  • Security Industry Association Announces the 2026 Security Megatrends

    The Security Industry Association (SIA) has identified and forecasted the 2026 Security Megatrends, which form the basis of SIA’s signature annual Security Megatrends report defining the top 10 factors influencing both near- and long-term change in the global security industry. Read Now

  • The Future of Access Control: Cloud-Based Solutions for Safer Workplaces

    Access controls have revolutionized the way we protect our people, assets and operations. Gone are the days of cumbersome keychains and the security liabilities they introduced, but it’s a mistake to think that their evolution has reached its peak. Read Now

  • A Look at AI

    Large language models (LLMs) have taken the world by storm. Within months of OpenAI launching its AI chatbot, ChatGPT, it amassed more than 100 million users, making it the fastest-growing consumer application in history. Read Now

  • First, Do No Harm: Responsibly Applying Artificial Intelligence

    It was 2022 when early LLMs (Large Language Models) brought the term “AI” into mainstream public consciousness and since then, we’ve seen security corporations and integrators attempt to develop their solutions and sales pitches around the biggest tech boom of the 21st century. However, not all “artificial intelligence” is equally suitable for security applications, and it’s essential for end users to remain vigilant in understanding how their solutions are utilizing AI. Read Now

  • Improve Incident Response With Intelligent Cloud Video Surveillance

    Video surveillance is a vital part of business security, helping institutions protect against everyday threats for increased employee, customer, and student safety. However, many outdated surveillance solutions lack the ability to offer immediate insights into critical incidents. This slows down investigations and limits how effectively teams can respond to situations, creating greater risks for the organization. Read Now

Most   Popular

New Products

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area.

  • AC Nio

    AC Nio

    Aiphone, a leading international manufacturer of intercom, access control, and emergency communication products, has introduced the AC Nio, its access control management software, an important addition to its new line of access control solutions.

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.