Google Chrome Vulnerability: Here's How to Fix It
Google has discovered a Zero-Day Vulnerability [CVE-2019-5786] that is being exploited by bad actors. If you are a Chrome user, you are at risk. Make sure your browser has been updated to the latest patched version [72.0.3626.121], which fixes the vulnerability.
- By Susan Alexandra
- Mar 08, 2019
Google has discovered a Zero-Day Vulnerability [CVE-2019-5786] that is being exploited by bad actors. If you are a Chrome user, you are at risk. Make sure your browser has been updated to the latest patched version [72.0.3626.121], which fixes the vulnerability.
Google posted an update last week addressing security vulnerability that hackers were exploiting in the wild. “Google is aware of reports that an exploit for CVE-2019-5786 exists in the wild,” the report read.
Justin Schuh, Google Chrome's security lead and engineering director, warned users to immediately update Chrome browser after the critical bug was discovered. “Also, seriously, update your Chrome installs... like right this minute. #PSA,” Schuch tweeted.
The vulnerability, which affects the browser in Windows, Mac, and Linux, was reported by Clement Lecigne of Google’s Threat Analysis Group on February 27.
What are zero-day vulnerabilities?
A zero-day or 0day vulnerability is a bug or flaw in a code that has been discovered and disclosed but not yet patched. You can also call them unknown vulnerabilities, because they aren’t discovered by software vendors until the software has already been released.
Once a bug is discovered, software vendors have a very limited time (zero days) in which they need to fix the issue. Until they release a patch, it is considered a “zero day” vulnerability. If there is exploit code available for that vulnerability, it’s a “zero day” exploit, with “zero” referring to the number of days since a patch has been available to the public.
Why it is important to update your browser?
Google Chrome 72.0.3626.121 addresses CVE-2019-5786, a Use-After-Free (UAF) vulnerability in FileReader, an application programming interface (API) included in browsers to allow web applications to read the contents of files stored on a user’s computer.
How to update your Chrome browser
To patch this vulnerability, you just need to update your chrome browser by following these quick steps:
- Open your browser and type, chrome://settings/help
- Click Relaunch
After relaunch, Google will show you the updated version which is 72.0.3626.121
How to stay safe from future vulnerabilities
In the world of cyber criminals, you can’t be 100 percent safe. However, there are still some actions you can take immediately if the same thing happens in future with any software.
- Keep software and security patches up to date by downloading the latest software releases and updates.
- Keep your system up-to-date.
- Establish safe and effective personal online security habits.
- Configure security settings for your operating system.
- Install a proactive and comprehensive security software to help block known and unknown threats to vulnerabilities.