Google’s latest Chrome 88 update fixes a security issue being actively exploited in the wild

Hemani Sheth Mumbai | Updated on February 06, 2021

Google has released the latest update for its Chrome Browser version 88.0.4324.150 which fixes a security issue that is being actively exploited in the wild.

The update is being rolled out for Windows, Mac and Linux over the coming days/weeks, Google said.

The tech giant has fixed a security bug with a high severity rating as part of the update. It did not provide much details about the vulnerability dubbed CVE-2021-21148.

“Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed,” it said.

The vulnerability described only as a “Heap buffer overflow in V8,” was reported by a researcher named Mattias Buelens on January 24.

As ZDNet notes, a few days after Buelens’ report, Google’s Threat Analysis Group posted an article about an active campaign against security researchers by North Korean hackers.

“Over the past several months, the has identified an ongoing campaign targeting security researchers working on vulnerability research and development at different companies and organisations,” TAG’s Adam Weidemann said in a blog post.

“The actors behind this campaign, which we attribute to a government-backed entity based in North Korea, have employed a number of means to target researchers,” Weidemann said.

TAG researchers are yet to confirm the mechanism of compromise as at the time and the vulnerability that was being exploited as the researchers targeted had been using fully patched and up-to-date Windows 10 and Chrome browser versions.

Anyone with information on Chrome vulnerabilities, including those being exploited in the wild (ITW) is eligible for reward payout under Chrome's Vulnerability Reward Program, the group had said.

Regardless of the exact vulnerability being patched, users are advised to update to the latest version of the browser to ensure security.

Published on February 06, 2021

Follow us on Telegram, Facebook, Twitter, Instagram, YouTube and Linkedin. You can also download our Android App or IOS App.

This article is closed for comments.
Please Email the Editor

You May Also Like