Google is releasing version 107 of its Chrome browser, which adds various additions under the hood and makes some important changes to better protect you on the Internet.
Due to the 14 individual security fixes included in Chrome 107, we strongly recommend that you download the update as soon as it becomes available to you. The bottom line revolves around zero-day vulnerability called CVE-2022-3723 (opens in new tab). This is a Type Confusion flaw affecting Chrome’s V8 JavaScript engine. As described by the cybersecurity company Avertium (opens in new tab)the flaw allows bad actors to “trick” the browser into running malware and trick users into thinking it’s legitimate data.
Avertium states that while Chrome V8 engine attacks are uncommon, they are among the most dangerous. And it looks like this is the third time Google has fixed a Type Confusion bug this year. One happened in March and others in April (opens in new tab).
As for the rest of the security patch (opens in new tab), things are not that hard. You see fixes for data validation and for browser extensions. But given that there is billions of Chrome users, there are many avenues that bad actors can use. We repeat: update your browser.
The the rest of the update (opens in new tab) is more focused on future-proofing Chrome. HEVC (High Efficiency Video Coding) already partially supported in the browser. Also known as H.265, HEVC is a codec that more efficiently compresses files to speed up download times. It is more common on electronic devices. With this update, Chrome joins Safari and Microsoft Edge as the only major web browsers with HEVC support.
Video conferencing tools also see a few changes (opens in new tab) to make them easier to use. Developers of these tools can now include a button to let people switch between tabs when sharing their screen. It’s basically a type of keyboard shortcut that saves you from having to dig through a bunch of tabs. Chrome 107 will also warn you if you’re sharing the same tab you’re video conferencing from. This causes a “hall of mirrors” effect, according to the patch notes.
Other reports claim that additional features are present in the update, but we haven’t been able to find them. Android Police (opens in new tab) states that Chrome now has the ability to import passwords from an external password manager or other browsers. And apparently the media picker for Chrome 107 on Android has been updated. We’ve reached out to Google to see if this is true, and if there are other hidden features. This story will be updated if we hear back.
Availability
You can download the update by going to “About Google Chrome” in the browser menu to install it automatically. Despite the many security fixes in the update, Google still isn’t done. The latest reports claim that 300 new security vulnerabilities were discovered in Chrome just this year. There may be another high-severity Type Confusion bug out there waiting to be discovered.
We recommend that you be proactive in this case. To better protect yourself, check TechRadar’s Best Internet Security Bundles of 2022
https://www.techradar.com/news/want-to-protect-yourself-install-chrome-107-now/
