Google Chrome patched for the second time in a month
Another security hole needs fixing in Google's browser this month, and this time it's critical.
Google Chrome has been patched to fix a critical security issue as well as a couple of other networking bugs.
This comes only around a week-and-a-half after Google Chrome needed to fix flaws in WebKit its open source browser engine.
The Google security team found a critical flaw that made Chrome vulnerable to a buffer overflow when handling particular responses from HTTP servers.
The issue could have allowed a specially crafted response from a server to crash the browser and allow an attacker to run code on a victim's computer.
Google said more details of the flaw would be made available once the majority of users were up to date with the fix.
However, Chris Evans of Chrome Security did say that the bug was in Chrome's browser kernel, and that it was doing a lot of internal code auditing, fuzzing and reviewing around the problem.
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
-
The Binance hack explainedNews Initial reports that a single compromised laptop was the cause of the Binance hack have been debunked by the crypto exchange firm
-
Lakeside Software taps Mark Benson to lead EMEA channel strategyNews The appointment comes as the digital employee experience (DEX) vendor looks to expand its partner ecosystem around the SysTrack platform
-
IBM and Red Hat report hundreds of open source fixes with Lightwell Clearinghouse schemeNews Lightwell Clearinghouse is now generally available, allowing firms to request priority review and remediations for open source software
-
Apple is speeding up software patching due to AI security concerns – here’s what you need to knowNews Apple is speeding up its software patching processes amid rising concerns that AI is helping hackers to spot and exploit flaws at a far quicker pace.
-
Microsoft defends “negligent” security approach that prolonged vulnerability fix for five monthsNews The tech giant has refuted claims that its practices have left customers “in the dark”
-
Ubuntu shifts to four-week update cycleNews Critical fixes will also come every two weeks, mitigating the issues involved with releasing prompt patches on the old three-week cadence
-
Microsoft angers admins as April Patch Tuesday delivers password feature without migration guidanceNews Security fixes include a zero day exploited by a ransomware group and seven critical flaws
-
Spanish spyware outfit uncovered, develops exploits for Windows, Chrome, and FirefoxNews Google was only able to discover the company after an anonymous submission was made to its Chrome bug reporting programme
-
Google adds new security vendor plugins for Chrome, improved Chrome OS policy controls for IT adminsNews New integrations across various security pillars aim to improve Chrome OS and Chrome browser security for enterprise customers
-
Google patches second Chrome browser zero-day of 2022News Google acted quickly to secure against the type confusion vulnerability that was under active exploitation