{"id":207173,"date":"2022-11-26T09:11:20","date_gmt":"2022-11-26T08:11:20","guid":{"rendered":"https:\/\/sftarticles.wpenginepowered.com\/en\/?p=207173"},"modified":"2025-07-01T20:19:10","modified_gmt":"2025-07-02T03:19:10","slug":"chrome-emergency-update","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/chrome-emergency-update\/","title":{"rendered":"Google releases emergency update for Chrome"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Google released a new security update for its Chrome web browser for desktop systems and Android. The update fixes a security issue that is exploited in the wild, according to Google.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The issue affects Chrome for Windows, Linux, Mac and Android, according to Google.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The security issue affects Chromium, the source that Chrome and other browsers, such as Microsoft Edge, Brave or Opera use. As such, it is not Chrome-specific, but an issue that affects all these browsers.<\/p>\n\n\n<div class=\"sc-card-program\">\r\n  <div class=\"sc-card-program__body\">\r\n    <div class=\"sc-card-program__row clearfix\">\r\n      <div class=\"sc-card-program__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-program__img\" alt=\"Chrome\" src=\"https:\/\/images.sftcdn.net\/images\/t_app-logo-xl,f_auto\/p\/b2e6d43a-96bf-11e6-a674-00163ed833e7\/965337810\/chrome-Google_Chrome_logo.png\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-title\">\r\n        <span class=\"sc-card-program__title\">Chrome<\/span>\r\n        <a class=\"sc-card-program__button sc-card-program-internal\" href=\"https:\/\/chrome.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\">Download Now<\/a>\r\n      <\/div>\r\n      <div class=\"sc-card-program__col-rating\">\r\n        <svg class=\"rating-score__content\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" version=\"1.1\" x=\"0\" y=\"0\" viewbox=\"0 0 50 50\" enable-background=\"new 0 0 50 50\" xml:space=\"preserve\"><path class=\"rating-score__background rating-score--good\" fill=\"none\" stroke-width=\"6\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><path class=\"rating-score__value rating-score__value--0\" fill=\"none\" stroke-width=\"6\" stroke-dashoffset=\"0\" stroke-miterlimit=\"10\" d=\"M40 40c8.3-8.3 8.3-21.7 0-30s-21.7-8.3-30 0 -8.3 21.7 0 30\"><\/path><text class=\"rating-score__number\" content=\"\" text-anchor=\"middle\" transform=\"matrix(1 0 0 1 25 31.0837)\" data-auto=\"app-user-score\"><\/text><\/svg>\r\n      <\/div>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <span class=\"sc-card-program__description\"><\/span>\r\n    <\/div>\r\n    <div class=\"sc-card-program__row\">\r\n      <img decoding=\"async\" class=\"sc-card-program__bigpic\" src=\"\" onerror=\"this.style.display='none'\">\r\n    <\/div>\r\n    <a class=\"sc-card-program__link track-link sc-card-program-internal\" href=\"https:\/\/chrome.en.softonic.com\/\" target=\"_self\" rel=\"noopener noreferrer\"><\/a>\r\n  <\/div>\r\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Chrome users should update the web browser immediately to resolve the issue. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How to install the Chrome security update<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"434\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2022\/11\/chrome-107-security-update-1024x434.jpg\" alt=\"\" class=\"wp-image-207175\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/chrome-107-security-update-1024x434.jpg 1024w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/chrome-107-security-update-300x127.jpg 300w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/chrome-107-security-update-768x326.jpg 768w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/chrome-107-security-update-18x8.jpg 18w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/chrome-107-security-update-150x64.jpg 150w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/chrome-107-security-update.jpg 1200w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Chrome up to date on Windows<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Google Chrome installs updates automatically by default, but this does not happen in real-time. Desktop versions of Chrome support manual updates, and this is how it is done:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Open the Chrome web browser on the computer.<\/li><li>Load chrome:\/\/settings\/help in the browser&#8217;s address bar, or, select Menu &gt; Help &gt; About Google Chrome if you prefer this way.<\/li><li>Chrome displays the installed version and runs a check for updates. Any new update is downloaded and installed at this point.<\/li><li>A restart is required to complete the process.<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">One of the following Chrome version needs to be listed on the Help page after the update:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Google Chrome on Mac or Linux: 107.0.5304.121<\/li><li>Chrome on Windows: 107.0.5304.121 or 107.0.5304.122<\/li><li>Chrome Extended Stable channel: 106.0.5249.199<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">There is no option to install a Chrome update for Android using the method described above. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The Chrome vulnerability<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Google confirmed that the update addresses a single security issue in the web browser. The official release notes page <a href=\"https:\/\/chromereleases.googleblog.com\/2022\/11\/stable-channel-update-for-desktop_24.html\" target=\"_blank\" rel=\"noreferrer noopener\">reveals<\/a> that it is a heap buffer overflow issue in the GPU.  Google does not provide detailed information about vulnerabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without going into too many details, heap buffer overflow issues may lead to the execution of arbitrary code. Google confirms that the issue is exploited in the wild, which means that attacks take place at the time of writing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/cve.mitre.org\/cgi-bin\/cvename.cgi?name=CVE-2022-4135\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2022-4135<\/a> record lists additional information on the issue at hand:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote\"><p>&#8220;Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.&#8221;<\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">The issue affects all old versions of the Chrome browser, both on the Stable and Extended Stable channel. The description highlights that the attack is web-based, using a specially crafted HTML page to exploit the issue. In other words: all it takes is to visit a webpage in Chrome to run the risk of being attacked successfully.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Google fixed 10 security issues in <a href=\"https:\/\/chrome.en.softonic.com\/articles\/chrome-107-issues-a-fix\" title=\"Chrome 107\">Chrome 107<\/a>, which it released two weeks ago. <\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Other Chromium-based browsers<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"647\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2022\/11\/brave-security-update-1024x647.jpg\" alt=\"\" class=\"wp-image-207176\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/brave-security-update-1024x647.jpg 1024w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/brave-security-update-300x190.jpg 300w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/brave-security-update-768x485.jpg 768w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/brave-security-update-18x12.jpg 18w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/brave-security-update-150x95.jpg 150w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2022\/11\/brave-security-update.jpg 1200w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><figcaption>Brave Browser fully updated<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The security issue affects all Chromium-based browsers; this includes Microsoft Edge, Brave, Vivaldi and Opera.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Only Brave Software, maker of the Brave Browser, released a security update for the browser so far. The company confirmed the release of the security update <a href=\"https:\/\/twitter.com\/brave\/status\/1596181052342550529\" target=\"_blank\" rel=\"noreferrer noopener\">on its<\/a> Twitter account.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Brave users may load brave:\/\/settings\/help or select Brave Icon &gt; Help &gt; About Brave to display the current version. New updates are downloaded and installed automatically when the page is opened.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google released a new security update for its Chrome web browser for desktop systems and Android. The update fixes a security issue that is exploited in the wild, according to Google. The issue affects Chrome for Windows, Linux, Mac and Android, according to Google. The security issue affects Chromium, the source that Chrome and other &hellip; <a href=\"https:\/\/cms-articles.softonic.io\/en\/chrome-emergency-update\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Google releases emergency update for Chrome&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1009,"featured_media":207174,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[2378],"usertag":[],"vertical":[],"content-category":[],"class_list":["post-207173","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-app-subdomain-redirectionchrome"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/207173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/1009"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=207173"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/207173\/revisions"}],"predecessor-version":[{"id":322861,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/207173\/revisions\/322861"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/207174"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=207173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=207173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=207173"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=207173"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=207173"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=207173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}