Google Warns of System-Controlling Chrome Bug

[upnorth]

Content source

https://nakedsecurity.sophos.com/2019/08/30/google-warns-of-system-controlling-chrome-bug/

Google is patching a serious bug in the desktop version of its Chrome browser that could let an attacker take over a computer simply by luring users to a website.

A fix for the bug, which affects the desktop version of Chrome on macOS, Windows, and Linux, will be available in the coming days, the company said. The flaw doesn’t affect the iOS or Android versions of Chrome. The bug lies in Blink, the rendering engine that underpins Chrome. A rendering engine is the part of the browser that interprets HTML and creates the visuals you see when you visit a website. Blink is part of the open-source Chromium project on which Chrome is based. The Chromium team created Blink in 2013 as a fork of WebCore, which is a part of WebKit, the browser engine that Apple uses for its Safari browser.

An attacker could exploit this serious bug if a user visits a malicious webpage, according to an advisory issued by the Center for Internet Security (CIS) issued a day after Google’s blog post on the issue. It warned : Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code in the context of the browser. Depending on the privileges associated with the application, an attacker could install programs; view, change, or delete data; or create new accounts with full user rights.

 

[Gandalf_The_Grey]

It's already patched in version 76.0.3809.132.

CIS Advisories

CIS Advisories.

www.cisecurity.org

Stable Channel Update for Desktop

The stable channel has been updated to 76.0.3809.132 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Se...

chromereleases.googleblog.com

But makes you wonder about chromium based clones (including Edge Beta/Dev)...

 

[oldschool]

But makes you wonder about chromium based clones (including Edge Beta/Dev)...

Absolutely everything has the potential to be hacked! Same with FF.

One could always use IE. Only kidding!

 

[ebocious]

Absolutely everything has the potential to be hacked! Same with FF.

One could always use IE. Only kidding!

And this is why we're here to talk about beefing up the ol' security detail!