Emergency Chromium Update: In-The-Wild Exploit

Chromium-based browsers affected: Update Now!

[bwnbwn]

Chrome has a bad hack on going. I suggest you update ASAP
[forbes.com...]

[robzilla]

Affects not just Chrome but all Chromium-based browsers, including Edge.

[engine]

I've just checked and updated my Chrome browser to Version 99.0.4844.82 (Official Build) (64-bit)

Added
As I understand it, it also relates to any browser based upon Chrome, including Microsoft Edge, Opera, Brave, etc.

[edited by: engine at 10:48 am (utc) on Mar 27, 2022]

[Achernar]

My version is 99.0.4844.84 since 2022/03/25

[engine]

It's interesting my Chrome browser didn't update to the very latest version, Which is a concern.

[chromereleases.googleblog.com...]

[Achernar]

They had several updates in only a few days.
[postimg.cc...]

[fearlessrick]

Version 99.0.4844.84 (Official Build) (x86_64)

Is that OK? Not getting many answers from anybody today.

[Achernar]

As far as I know, yes

[aristotle]

I just updated to Version 100.0.4896.60 (Official Build) (64-bit)

[NickMNS]

@aristotle, I just did the same. I had previously (3 days ago) updated to 99.0.4844.84. I also just updated Opera now and it is running on Chrome/99.0.4844.84. the previous version (3 days ago) was ... .51. So if you already updated Opera because of this Exploit, you should probably updated it again now.

Version 99.0.4844.84 (Official Build) (x86_64)

Is that OK? Not getting many answers from anybody today.

To the best of my knowledge, that was the version that addressed the exploit.

[engine]

FYI Google Chrome 100 For Android and Stable Channel for Desktop [webmasterworld.com]

[aristotle]

Somehow I thought that Chrome always updates automatically in the background. Once I tried unsuccessfully to find a setting that would allow me to prevent this and instead receive a notification whenever a new Chrome update is available. This is the way I have Firefox set up. But I don't use Chrome much anyway, so didn't worry about it.

Generally I've always liked to wait a few days after an update becomes available before I install it, to see if other users run into a problem.

Of course in this case it was an "emergency" update, so I decided to see if my Chrome was up-to-date. When I chose "check for updates", it immediately began downloading the latest update.

Does this mean that Chrome doesn't update automatically? I'm still not sure.

[Achernar]

On one computer I've the automatic update disable (using "tricks"). On other computers it updates automatically. The same with extensions.
I've written an extension to monitor and log those events. So I'm never surprised when a behaviour changes.

[engine]

Google explains how it detects and fixes Chrome security bugs.