31 Mar Hackers Exploit A Critical Google Chrome And Microsoft Edge Vulnerability, Update Now To Fix It

Google and Microsoft are both releasing emergency patches to address a severe vulnerability in their browsers. This vulnerability, which allows for remote code execution within the V8 Javascript engine, is currently being exploited by hackers. To avoid the issue, we recommend that you upgrade Chrome and Edge right away.

An anonymous user or researcher reported this vulnerability, known as CVE-2022-1096, to Google. All Chromium-based browsers, including Opera and Brave, appear to be affected. Google does not wish to provide any information that may be valuable to hackers, thus details on the issue are limited.

Access to problem details and links may be restricted until the majority of users have received a remedy. We will also keep the limits if the problem is in a third-party library that other projects rely on but hasn’t yet been patched.

CVE-2022-1096, on the other hand, allows for “type-confusion” attacks in the V8 Javascript engine. This, like all things Javascript, is tough to explain, and Google is keeping quiet about it. So, here’s the deal: hackers can fool the V8 engine into reading and writing data on your system without your consent.

Google will release further details about this issue after the bulk of its customers have installed the emergency fix. The business will also wait for other Chromium browsers to solve the issue—Microsoft Edge is releasing a remedy, while competitors such as Brave and Opera are still working on it.

Chrome and Edge are both intended to update themselves automatically. That said, you should type chrome:/settings/help or edge:/settings/help into your address bar to determine if you’re using Chrome 99.0.4844.84 or Microsoft Edge 99.0.1150.55.