While Google Chrome, the world’s most popular internet browser, continues to gain new features, it is constantly updated against security vulnerabilities. The latest of these updates removes the high-risk CVE-2022-4135 vulnerability.
According to the statement from Google, this vulnerability was discovered by French security researcher Clement Lecigne. This vulnerability threatens users who have not yet updated.
Details of the vulnerability have not been shared yet.
Technology giant Google has not shared any information about the nature of the vulnerability at this time. The reason for this situation is that most of the users do not want to share this information with malicious people without updating. In addition, it will be examined whether the vulnerability persists in Chrome, third-party plugins and libraries.
Although Google did not explain how the vulnerability works, it is stated that the problem occurred during the heap buffer overflow. Attackers targeting the areas reserved for heap on RAM can interfere with the memory thanks to this vulnerability.
Those who want to be protected from this vulnerability need to upgrade their Chrome browser to version 107.0.5304.121 on Mac and Linux devices, and to version 107.0.5304.121/.122 on Windows devices. Both updates will be available to users in the coming days.
303 vulnerabilities were discovered this year for Google Chrome, which is currently at the top in terms of browser market share with 66%. In this process, Safari compared only 26 vulnerabilities, while this number was 103 for Edge and 117 for Firefox. Another zero-day bug for Google Chrome, CVE-2022-3723, was also revealed recently.