{"uuid": "d194470a-ad5c-4f7b-b1f3-a7f47159eb4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0609", "type": "seen", "source": "https://t.me/hacking_Attack/77727", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix 8th zero-day this year\n\nGoogle pushes emergency Chrome update to fix 8th zero-day this yearPost Views: 10 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Google has released an emergency security update for the desktop version of the Chrome web browser, addressing the eighth zero-day vulnerability exploited in attacks this year.The high-severity flaw is tracked as CVE-2022-4135 and is a heap buffer overflow in GPU, discovered by Clement Lecigne of Google\u2019s Threat Analysis Group on November 22, 2022.\n\n\u201cGoogle is aware that an exploit for CVE-2022-4135 exists in the wild,\u201d reads the update notice.\n\nAs users need time to apply the security update on their Chrome installations, Google has withheld details about the vulnerability to prevent expanding its malicious exploitation.\nAccess to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven\u2019t yet fixed. \u2013 Google\nIn general, heap buffer overflow is a memory vulnerability resulting in data being written to forbidden (usually adjacent) locations without check.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course\nAttackers may use heap buffer overflow to overwrite an application\u2019s memory to manipulate its execution path, resulting in unrestricted information access or arbitrary code execution.\n\nChrome users are recommended to upgrade to version 107.0.5304.121/122 for Windows and 107.0.5304.122 for Mac and Linux, which addresses CVE-2022-4135.\n\nTo update Chrome, head to Settings \u2192 About Chrome \u2192 Wait for the download of the latest version to finish \u2192 Restart the program.\nhttps://www.bleepstatic.com/images/news/u/1220909/Software/Update.png \nChrome\u2019s eighth zero-day fix in 2022Chrome version 107.0.5304.121/122 fixes the eighth actively exploited zero-day vulnerability this year, indicating the high interest of attackers against the widely used browser.\n\nThe previous seven zero-day fixes are:\n\n* CVE-2022-3723\u00a0\u2013 October 28th\n* CVE-2022-3075\u00a0\u2013 September 2nd\n* CVE-2022-2856\u00a0\u2013 August 17th\n* CVE-2022-2294\u00a0\u2013 July 4th\n* CVE-2022-1364\u00a0\u2013 April 14th\n* CVE-2022-1096\u00a0\u2013 March 25th\n* CVE-2022-0609\u00a0\u2013 February 14th\n\nThese flaws are typically leveraged by sophisticated hackers\u00a0who use them in highly targeted attacks.\n\nNevertheless, all Chrome users are strongly advised to update their web browsers as soon as possible to block potential exploitation attempts.\nTrending: Windows Kerberos authentication breaks after November updates\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-8-2-300x150.png Fake MSI Afterburner targets Windows gamers with miners, info-stealersNovember 24, 2022\nReading Time: 4 minutes\n\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/11/Images-for-the-News-posts-7-1-300x[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:15.883823Z"}