Google announces critical Chrome flaw, urging immediate updates

Secret flaw pushes Google to roll out Chrome updates for Windows, Mac and Linux

Security specialist Sophos has issued an urgent warning to Chrome users after discovering an alarming security flaw present across Windows, Mac and Linux.

While the bug itself remains a secret, Google has shared the exploit’s codename CVE-2020-6457 along with a brief description: “Use after free in speech recognizer.” It's worth mentioning, that after some digging, the US government’s National Vulnerability Database has marked this mysterious flaw as “Reserved.”

Sophos explained this further: "In some cases, use-after-free bugs can allow an attacker to change the flow of control inside your program, including diverting the CPU to run untrusted code that the attacker just poked into memory from outside, thereby sidestepping any of the browser’s usual security checks or ‘are you sure’ dialogs.

“That’s the most serious sort of exploit, known in the jargon as RCE, short for remote code execution, which means just what it says - that a crook can run code on your computer remotely, without warning, even if they’re on the other side of the world.”

Should Sophos’ assessment be accurate, it would come as no surprise that Google would want to keep the details of this exploit under wraps until most Chrome and Chromium users have updated their browsers.

Google is currently rolling out Chrome 81.0.4044.113 on Windows, Mac, and Linux. To check your version of Chrome, select the hamburger menu in the top right corner of your browser, then click “Help “ and “About Google Chrome.” 

If you’re not running the most recent version of Chrome, we recommend updating your browser immediately. That said, your browser should update automatically once you check the version in the “About Google Chrome” page.

Featured Resources

Unlocking collaboration: Making software work better together

How to improve collaboration and agility with the right tech

Download now

Four steps to field service excellence

How to thrive in the experience economy

Download now

Six things a developer should know about Postgres

Why enterprises are choosing PostgreSQL

Download now

The path to CX excellence for B2B services

The four stages to thrive in the experience economy

Download now

Most Popular

Microsoft is submerging servers in boiling liquid to prevent Teams outages
data centres

Microsoft is submerging servers in boiling liquid to prevent Teams outages

7 Apr 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

8 Apr 2021
Xiaomi Redmi Note 10 Pro review: Champagne tastes on a lemonade budget
Mobile Phones

Xiaomi Redmi Note 10 Pro review: Champagne tastes on a lemonade budget

13 Apr 2021