Google issues security warning for 2 billion Chrome users

[The Buzz]

Google "quietly" released a security warning last week for Chrome users across Windows, Mac, and Linux with a new security fix. The security warning was issued around a security vulnerability in Chrome and it urges people to upgrade to the latest Google Chrome version to keep their browser secure.

From Forbes.com:

Picked up by security specialist Sophos, Google has quietly issued a warning that Chrome has a critical security flaw across Windows, Mac and Linux and it urges users to upgrade to the latest version of the browser (81.0.4044.113). Interestingly, at the time of publication, Google is also keeping the exact details of the exploit a mystery.

In a blog post, all Google divulges is the codename for the exploit (CVE-2020-6457) and a vague description: “Use after free in speech recognizer”. Do some digging, however, and you will find the exploit has been marked as 'Reserved' by the US government’s National Vulnerability Database.

Shedding some light upon this, however, is Sophos which explains:

“[I]n some cases, use-after-free bugs can allow an attacker to change the flow of control inside your program, including diverting the CPU to run untrusted code that the attacker just poked into memory from outside, thereby sidestepping any of the browser’s usual security checks or “are you sure” dialogs. That’s the most serious sort of exploit, known in the jargon as RCE, short for remote code execution, which means just what it says – that a crook can run code on your computer remotely, without warning, even if they’re on the other side of the world.”

Read more here: https://www.forbes.com/sites/gordonk...e-browser/amp/

And here is a link to Google's announcement: https://chromereleases.googleblog.co...esktop_15.html

[TheGooner]

Chrome is pretty good at self updating ... I was already on 81.0.4004.113 without trying.

If you're not sure what version you are on - choose MENU : HELP : ABOUT GOOGLE CHROME
And you can see the version and optionsto upgrade if you are not up to date.

(The menu is those three vertical dots on the top right hand side of the browser)

[Former Member 14]

was already on 81.0.4004.113

That's weird, I'm on: Version 81.0.4044.122 (Official Build) (64-bit), which, according to Google is the latest Chrome version.
https://chromereleases.googleblog.co...esktop_21.html

[Topboss]

I am also on Version 81.0.4044.122

It was previously 81.0.4004.113

[Sherlock]

Version 80.0.3987.163 (Official Build) (64-bit)
i guess i should restart the computer sometimes

[universal4]

Chrome updates usually only require restarting chrome itself.

Rick
Universal4

[Sherlock]

Yes, but I restart Chrome only with computer and even with computer restart the session is usually restored (I am not sure if the chrome is updated before the session restart?).

[universal4]

No I had to restart chrome the other day to get the latest version.

Rick
Universal4

[TheGooner]

Yep - in using that check I outlined above Chrome updated itself from 81.0.4044.113 to 81.0.4044.122

[Pokerface]

Thanks for the info and tip ... just completed: Version 81.0.4044.129

[Nenad]

Never took that long to update from Version 81.0.4044.122 (Official Build) (64-bit) to 81.0.4044.129 (Official Build) (64-bit). It took more than 10 minutes and also system asked me to allow for G oogle to update. First time I saw this message.