Google has updated Chrome to address the second actively exploited 零日 vulnerability, which the company has identified as CVE-2022-1096, discovered in the browser this year.
第一个铬 零日 2022年 发现2月. That flaw, CVE-2022-0609, was 后来发现 have been exploited by two state-sponsored North Korean hacking groups looking to compromise numerous targets across various industries within the US.
Other information about the vulnerability—including who reported it, how much they'll earn via Google's bug赏金计划, or how it can be exploited—hasn't been revealed. Google does say that it's "aware that an exploit for CVE-2022-1096 exists in the wild," however.
Google says it's released a patch for CVE-2022-1096 with Chrome version 99.0.4844.84 for 窗户, Mac, 和 Linux 和 that the release will "roll out over the coming days/weeks." But the browser's users can also 手动更新 if they don't want to wait for the automatic update.
报名参加 安全Watch newsletter for our top privacy 和 security stories delivered right to your inbox.
Your subscription has been confirmed. 密切关注你的收件箱!报名参加 other newsletters