Update Now! Chrome Browser Gets 11 Security Fixes with 1 Zero-Day

Introduction

[{"selector":"#anim-2317394b-b77b-4985-9345-8dd09ae7a03f","keyframes":{"opacity":[0,1]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f0350b1a-d4e9-40a4-83eb-c081038885e8","keyframes":{"transform":["translate3d(0px, 165.18513%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b2f7e29f-3492-4e06-8152-0b378412012a [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.179687404002955%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] The latest update to Google’s Chrome browser is out, bumping the four-part version number to 104.0.5112.101 (Mac and Linux) or 104.0.5112.102 (Windows).

What is Zero-Day?

[{"selector":"#anim-6ce14f54-5202-45f2-a168-6c62b35bd318","keyframes":{"opacity":[0,1]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-d1f6d925-4eec-4ce8-ba65-06f9fc14c7cd","keyframes":{"transform":["translate3d(0px, 157.79322%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-bba47705-2de8-4dc8-9187-933aa8dd6026 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] Zero-day is a reminder that there were zero days on which even the most well-informed and proactive user or sysadmin could have been patched ahead of the Bad Guys.

Update Details

[{"selector":"#anim-e6474b1d-76d3-4196-920b-c4ab662673a3","keyframes":{"opacity":[0,1]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-9d77e4c7-b737-4be0-b74c-9028504e6a20","keyframes":{"transform":["translate3d(0px, 139.05524%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-eaf46e51-b3d3-4a0d-9848-cbe7caa545d8 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(23.959536329486998%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] Details about the updates are scant, given that Google, in common with many other vendors these days, restricts access to bug details “until a majority of users are updated with a fix” .

The Zero-day Hole

[{"selector":"#anim-405d6821-8f86-46c9-862a-8a54e2eac554","keyframes":{"opacity":[0,1]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-0528bf00-6ca1-4d2d-80db-88ff3cdb6d15","keyframes":{"transform":["translate3d(0px, 146.01848%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-5f0e9c26-1d67-48bd-ab64-66b0871697f0 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(34.179687404002955%, 0, 0) translate(25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.14,.34,.47,.9)","fill":"forwards"}] The zero-day bug CVE-2022-2856 is presented with no more detail than you see above: “Insufficient validation of untrusted input in Intents.”

Chrome Intent

[{"selector":"#anim-75c947f9-c592-4b94-bdf1-99a4d1dc0cc6","keyframes":{"opacity":[0,1]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-674599dc-c9ae-46f3-ad07-249b183dde7b","keyframes":{"transform":["translate3d(0px, 143.20987%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-5a7fbfc5-1709-4b69-b7ec-d5479a6f814c [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-44.72791552603927%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] A Chrome Intent is a mechanism for triggering apps directly from a web page, in which data on the web page is fed into an external app launched to process that data.

What to do?

[{"selector":"#anim-e00d26c3-8270-47ed-9c25-bc71179accf2","keyframes":{"opacity":[0,1]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-16217b1f-0a89-4a98-9eee-ac75c7782b41","keyframes":{"transform":["translate3d(0px, 143.20987%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-35ba9bcf-8fd9-4c50-a73c-09130e65eee0 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-53.69140600156766%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] Chrome will probably update itself, but we always recommend checking anyway. On Windows and Mac, use More > Help > About Google Chrome > Update Google Chrome.

Chrome for iOS

[{"selector":"#anim-1d2aac52-02fe-4f64-a5c4-20f46e7e73f3","keyframes":{"opacity":[0,1]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-03519798-51b9-406b-bfbc-ecd8d62e4404","keyframes":{"transform":["translate3d(0px, 143.20987%, 0)","translate3d(0px, 0px, 0)"]},"delay":200,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-c24da8a4-31df-48a7-acd0-76bbaf936b2e [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] There’s a separate release bulletin for Chrome for iOS, which goes to version 104.0.5112.99, but no bulletin yet [2022-08-17T12:00Z] that mentions Chrome for Android.

For more such tech stories, visit us.

[{"selector":"#anim-88934691-fc6d-4654-8678-c1bef58662a1","keyframes":[{"transform":"scale(1)","offset":0},{"transform":"scale(1.5)","offset":0.33},{"transform":"scale(0.95)","offset":0.66},{"transform":"scale(1)","offset":1}],"delay":0,"duration":1450,"easing":"ease-in-out","fill":"both","iterations":10}] [{"selector":"#anim-7ce3d598-514e-417a-9a77-2227d16274f0 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(35.937499914669296%, 0, 0) translate(25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.14,.34,.47,.9)","fill":"forwards"}]