Update Google Chrome now to protect yourself from an urgent security bug

By Alan Truly Published July 5, 2022

Google posted a security update for its Chrome browser that fixes what’s known as a zero-day bug. The problem affects Chrome on Windows, Mac, and Android. The flaw can lead to arbitrary code execution, a serious security vulnerability, so it’s best to download and install the latest version immediately. Zero-day bugs mean that this is a known weakness and, in this case, Google said that the flaw is already being exploited by hackers.

Google did not post a detailed explanation of how the exploit works, but will do so when the majority of people have updated, making the danger of further attacks less severe. The most severe bug is identified as CVE-2022-2294 and the update also patches CVE-2022-2295 and CVE-2022-2296.

Google Chrome app on s8 screen. — Dennizn / Shutterstock

Although details are scarce, the exploit is being used by hackers in the wild, so we recommend updating Chrome immediately. The exploit may allow arbitrary code execution on your desktop, which has the potential to give hackers full access to your PC.

Recommended Videos

This is the fourth Chrome zero-day bug fixed this year, with previous fixes arriving in February, March, and April, signaling an increase in hacking attempts. It would be best to enable automatic Chrome updates while on the *About Chrome* page to get these problems taken care of as soon as possible.

Please enable Javascript to view this content

How to protect yourself

To install the latest version of Google Chrome on Windows or Mac, open the app and click the three vertical dots at the top-right to see more options. In the Help menu, choose About Chrome to see information about the browser. In most cases, Chrome will automatically start the update process so that only a relaunch is required to finish the installation. If an update button appears, click it, then relaunch the app to finish and secure the browser from attacks.

From the About Chrome page, relaunch to update. — Image used with permission by copyright holder

If the latest version is already installed, no update is necessary, and not every computer is affected. The Chrome Stable channel on Windows and Extended Channel on both Windows and Mac require the update. By default, Chrome is on the Stable channel, which is best for most users and is least likely to have problems.

Topics

Computing Writer

Alan Truly is a Writer at Digital Trends, covering computers, laptops, hardware, software, and accessories that stand out as…

Computing

This new Google Chrome security warning is very important

Google is changing how it warns its users about suspicious files on Chrome by adding new full-page warnings and cloud scanning regarding suspicious downloads, according to Windows Report. This is an attempt to explain more precisely why it blocks specific downloads. Google says that the AI models will divide the warning into two categories: "suspicious" or "dangerous."

The new warning system primarily benefits those using the anti-phishing Enhanced protection feature. The files users upload to the cloud for an automatic scan and those that undergo a deep scan are 50 times more likely to have the AI flag them as malware.

Computing

Google is cracking down on internet security in this big way

Connection is not private warning from Google.

Google is making some serious changes to digital certificate security on the web, the company announced on its Security blog. The big news is that Google will no longer trust certificates from two large security firms -- Entrust or AffirmTrust -- due to repeated security lapses.

According to Google, the companies, which are Certificate Authorities (CA), have demonstrated patterns of unmet improvement commitments, compliance failures, and no measurable progress in how fast the company responds to publicly disclosed incident reports.

Computing

The latest Windows update is breaking VPN connections

Windows Update running on a laptop.

Microsoft has acknowledged that the Windows security updates for April 2024 (KB5036893 for Windows 11, KB5036892 for Windows 10) are causing disruptions to virtual private network (VPN) connections across various client and server platforms. According to information on the Windows health dashboard, devices running Windows may experience VPN connection failures following the installation of either the April 2024 security update or the April 2024 non-security preview update.

The company has also stated that it is actively investigating user reports regarding these issues and will share more details in the coming days. The impacted Windows versions include Windows 11, Windows 10, and Windows Server 2008 onward.