Google has released security updates for the Chrome browser that addresses multiple vulnerabilities, including CVE-2022-3075 and CVE-2022-2856, which are reported to be actively exploited.

The released security updates are for Google Chrome users on Windows, Mac, and Linux.

Security Risks

Successful exploitation of the identified vulnerabilities, in outdated Chrome browser version, could allow for remote execution of malicious code and taking control of a vulnerable system.

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Upgrade, as soon as possible, to the latest supported version of installed Apple software in order to continue receiving technical support and security patches.

The released software versions to upgrade to are:

• Chrome 105.0.5195.102 for Windows, Mac and Linux

• Chrome 105.0.5195.100 for iOS

• Chrome 105.0.5195.79 for Android

2. Update, to the latest releases, other installed browsers such as Microsoft Edge, Opera, Mozilla Firefox, Safari, etc.

3. Before any update task, ensure you have backup for your data.

For further information and support, please contact the National Cyber Security Authority (NCSA) by email to rwcsirt@ncsa.gov.rw or call us on 9009

References

Stable Channel Update for Desktop

Chrome Stable for iOS Update

Chrome for Android Update