News, Reviews & Betas which includes large community peer support Thanks to an as yet undisclosed critical vulnerability in Chrome 96, confirmed to be actively being exploited in the wild, Google is rolling out an update to Chrome 96, which y’all should update to.<\/b>
\nGoogle has updated Chrome to version 96.0.4664.110 for Windows, Mac, and Linux, in the Stable channel due to a high-severity zero-day vulnerability that the firm has confirmed as currently being exploited in the wild. According to the announcement, the update might take time to reach everyone, but we were able to get the update right away on our test system. The update contains five fixes, which you can see below along with the corresponding bounty reward paid for the disclosure. Google also notes that „Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven\u2019t yet fixed.“ which likely applies to CVE-2021-4102 and of which is already actively being exploited in the wild according to the search giant. According to Bleeping Computer, who first spotted this, it is the 16th such zero-day vulnerability that the company has patched this year, so not entirely uncommon either. The other 15 zero-days patched in 2021 are listed below: You might also remember that when Chrome 96 was released last month, it was disclosed that Chrome 97 will not get released until the first week of January, which makes patching the current version all the more important. You can check if the update is available by going to the Chrome menu > Help > About Google Chrome. The browser will also auto-check for recent updates and if one is available will install and give an option to relaunch, upon which the update will be applied. Source: Google via Bleeping Computer<\/p>\n