InfoSecBulletin Cybersecurity for mankind
Google has released a security update for Chrome that patches four high-severity vulnerabilities. The update is available for Mac, Linux, and Windows, and it will be rolled out over the next few days/weeks.
The vulnerabilities were discovered by three outside researchers, and they could have been exploited by attackers to take control of a user’s computer. Google has awarded bug bounties of up to $20,000 for the reports.
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
The vulnerabilities are:
- CVE-2023-3420: A confusion issue in V8.
- CVE-2023-3421: A use-after-free issue in media.
- CVE-2023-3422: A use-after-free issue in guest view.
Google uses a variety of security tools to find vulnerabilities in Chrome, including libFuzzer, AFL, Control Flow Integrity, AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, and UndefinedBehaviorSanitizer.
To update Chrome, open the browser and go to Help > About Google Chrome. If an update is available, it will be downloaded and installed automatically.
Different Release Channels
Chrome supports several different release channels. These channels allow Google to gradually roll out new features and security updates to users.
The stable channel is the most stable release channel, and it is recommended for most users. The beta channel is a bit more experimental, but it still receives regular security updates. The dev channel is the most experimental release channel, and it is not recommended for everyday use.
You can switch between release channels by going to Settings > Advanced > About and clicking the Change channel button.
Backing Up Your Profile
Before switching to a different release channel, it is a good idea to back up your profile. This will ensure that you do not lose your bookmarks, browsing history, and other settings.
To back up your profile, open the Chrome menu and go to Help > Troubleshooting Information. Click the Export profile button and save the file to a safe location.
If you ever need to restore your profile, you can import it by opening the Chrome menu and going to Help > Troubleshooting Information. Click the Import profile button and select the file you saved earlier.
