CISA orders agencies to patch exploited Google Chrome bug by Dec 26th

CyberTech

Level 44
Thread author
Verified
Top Poster
Well-known
Forum Veteran
Nov 10, 2017
3,135
1
22,994
4,269
The Cybersecurity and Infrastructure Security Agency (CISA) has added one more security vulnerability to its list of bugs known to be exploited in attacks.

The flaw (tracked as CVE-2022-4262) was patched as an actively exploited zero-day bug in the Google Chrome web browser on Friday for Windows, Mac, and Linux users.

In a security advisory published right before the weekend, Google said it "is aware of reports that an exploit for CVE-2022-4262 exists in the wild."

This is the ninth Chrome zero-day exploited in the wild that Google has patched since the start of the year.

The bug is caused by a high-severity type confusion weakness in the Chromium V8 JavaScript engine reported by Clement Lecigne of Google's Threat Analysis Group.

The rest