SECURITY ALERTS

A Vulnerability (CVE-2022-4262) Exists in Google Chrome, Microsoft Edge, Brave, and Vivaldi Could Allow for Arbitrary Code Execution

DESCRIPTION:

A Vulnerability (CVE-2022-4262) Exists in Google Chrome, Microsoft Edge, Brave, and Vivaldi which are based on Chromium. The vulnerability exists due to a type confusion error within the V8 engine in Google Chrome. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger a type confusion error and execute arbitrary code on the target system. The vulnerability is being actively exploited in the wild.

 

AFFECTED RELEASES:
Google Chrome prior to 108.0.5359.94
Microsoft Edge prior to 108.0.1462.41
Brave prior to 1.46.134
Vivaldi prior to 5.5.2805.50

 

SOLUTION:
Upgrade to at least Google Chrome 108.0.5359.94 by following steps:
1. Open the Google Chrome browser.
2. Enter “chrome://settings/help” in the address bar. The window that appears will automatically check for updates and show you the current version of Chrome.
3. After Chrome is updated, click the “RELAUNCH” option to restart Chrome and complete the update.

Upgrade to at least Microsoft Edge 108.0.1462.41 by following steps:
1. Open the Microsoft Edge browser.
2. Enter “edge://settings/help” in the address bar. The window that appears will automatically check for updates and show you the current version of Edge.
3. After Edge is updated, click the “RELAUNCH” option to restart Edge and complete the update.

Upgrade to at least Brave 1.46.134 by following steps:
1. Open the Brave browser.
2. Enter “brave://settings/help” in the address bar. The window that appears will automatically check for updates and show you the current version of Brave.
3. After Brave is updated, click the “RELAUNCH” option to restart Brave and complete the update.

Upgrade to at least Vivaldi 5.5.2805.50 by following steps:
1. Open the Vivaldi browser.
2. Click Vivaldi menu button > Help > Check for Updates.
3. When an update is available, click on Install Update in the bottom right corner to complete updating Vivaldi.

 

REFERENCE:
1. https://www.ithome.com.tw/news/154564
2. https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html
3. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-4262
4. https://brave.com/latest/
5. https://vivaldi.com/blog/desktop/minor-update-six-5-5/
6. https://www.cybersecurity-help.cz/vdb/SB2022120625
7. https://nvd.nist.gov/vuln/detail/CVE-2022-4262
 

Back To Top