Security Alert: Urgent Google Chrome/Microsoft Edge patch
Date:
2022-11-28 19:53:00
Status:
Closed
Brief Description:
A zero-day vulnerability in Google Chrome and Microsoft Edge for Windows, macOS, and Linux may lead to arbitrary code execution or sensitive information disclosure. Google states this vulnerability is being actively exploited. Patch now.
Current Status:
Microsoft has published Microsoft Edge 107.0.1418.62 to address this vulnerability.
For Microsoft Edge:
To check if your browser is updated, navigate to Menu > Help and Feedback > About Microsoft Edge, or edge://settings/help in the address bar. If your Edge browser is listed as 107.0.1418.62 or higher, you are protected.
Users should apply the following updates:
• Edge 107.0.1418.62 or higher
Certified Desktop customers:
• Windows: A patch for Microsoft Edge will be available today, Tuesday, November 29 with an install deadline of 4:00pm the same day. Microsoft Edge will automatically update for most customers. This patch will address instances where automatic update has not yet occurred.
• macOS: Users of Microsoft Edge should manually check for updates and install them.
Microsoft Edge users who do not have a managed computer should check for updates and install them.
For more information refer to the references below.
Microsoft Edge Security Updates: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
For Microsoft Edge:
To check if your browser is updated, navigate to Menu > Help and Feedback > About Microsoft Edge, or edge://settings/help in the address bar. If your Edge browser is listed as 107.0.1418.62 or higher, you are protected.
Users should apply the following updates:
• Edge 107.0.1418.62 or higher
Certified Desktop customers:
• Windows: A patch for Microsoft Edge will be available today, Tuesday, November 29 with an install deadline of 4:00pm the same day. Microsoft Edge will automatically update for most customers. This patch will address instances where automatic update has not yet occurred.
• macOS: Users of Microsoft Edge should manually check for updates and install them.
Microsoft Edge users who do not have a managed computer should check for updates and install them.
For more information refer to the references below.
Microsoft Edge Security Updates: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Services Affected:
Certified Desktop
Full Description:
A zero-day vulnerability in Google Chrome and Microsoft Edge for Windows, macOS, and Linux may lead to arbitrary code execution or sensitive information disclosure. The vulnerability is a buffer overflow bug in the GPU component. Google states this vulnerability is being actively exploited. Patch now.
For Google Chrome:
To check if your browser is updated, navigate to Settings > Help > About Google Chrome or chrome://settings/help in the address bar. If your Chrome browser is listed as 107.0.5304.121 or higher, you are protected.
Users should apply the following updates:
• Chrome 107.0.5304.121 or higher
Certified Desktop customers:
• Windows: A patch for Google Chrome will be available today, Monday, November 28 with an install deadline of 4:00pm on Tuesday, November 29.
• macOS: A patch for Google Chrome will be available today, Monday, November 28 with an install deadline of 4:00pm on Tuesday, November 29.
Users who do not have a managed computer should check for updates and install them.
For more information refer to the references below.
Chrome Releases: https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html
Microsoft Edge Security Updates: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Bleeping Computer: https://www.bleepingcomputer.com/news/security/google-pushes-emergency-chrome-update-to-fix-8th-zero-day-in-2022/
For Google Chrome:
To check if your browser is updated, navigate to Settings > Help > About Google Chrome or chrome://settings/help in the address bar. If your Chrome browser is listed as 107.0.5304.121 or higher, you are protected.
Users should apply the following updates:
• Chrome 107.0.5304.121 or higher
Certified Desktop customers:
• Windows: A patch for Google Chrome will be available today, Monday, November 28 with an install deadline of 4:00pm on Tuesday, November 29.
• macOS: A patch for Google Chrome will be available today, Monday, November 28 with an install deadline of 4:00pm on Tuesday, November 29.
Users who do not have a managed computer should check for updates and install them.
For more information refer to the references below.
Chrome Releases: https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html
Microsoft Edge Security Updates: https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Bleeping Computer: https://www.bleepingcomputer.com/news/security/google-pushes-emergency-chrome-update-to-fix-8th-zero-day-in-2022/
CIT TDX ID: