Fortunately, updating Chrome is usually as simple as restarting your computer.
Google Chrome users on Windows, Mac, and Linux should install the most recent browser update to protect themselves from a serious security flaw that hackers are actively exploiting.
“Google is aware of reports that an exploit for CVE-2022-3075 exists in the wild,” the company said in a blog post published on September 2nd. An anonymous tipter reported the issue on August 30th, and Google says the update will be available to all users in the coming days or weeks.
The company hasn’t revealed much about the nature of the bug yet. So far, we know that it is related to “insufficient data validation” in Mojo, a collection of runtime libraries used by Chromium, the codebase on which Google Chrome is built.
“Access to bug details and links may be restricted until the majority of users have received a fix,” the company said. By withholding those details for the time being, Google makes it more difficult for hackers to figure out how to exploit the vulnerability before the new update closes the window for attacks.
To activate the update, Chrome users must restart the browser. This will update Chrome for Windows, Mac, and Linux to version 105.0.5195.102. To ensure you’re using the most recent version, click the three-dot icon in the top right corner of your browser. Navigating to “Help,” then “About Google Chrome,” will take you to a page that will tell you if Chrome is up to date on your device.
This latest update arrives just days after Google Chrome version 105 was released on August 30th. This update already included 24 security fixes. That apparently wasn’t enough.
This is the sixth zero-day vulnerability that Chrome has encountered this year. According to BleepingComputer, the most recent actively exploited vulnerability was discovered in mid-August.