Chrome users urged to update as Google patches seventh zero-day exploit this year

Late last week, Google rolled out emergency fixes to contain an actively exploited zero-day flaw in its Chrome web browser.  The vulnerability, tracked as CVE-2022-3723, has been described as a type confusion flaw in the V8 JavaScript engine.

Successful exploitation of the vulnerability could allow attackers to read sensitive information of other applications, crash the applications by accessing memory regions that should not be accessible from the application, or perform remote code execution.

What You Should Do
Google has issued an emergency update that contains a single security fix.  If you use the Chrome browser, we advise you to take a moment to apply the latest patch.  If you haven’t already, we encourage users to enable the automatic update function in Chrome to ensure software is updated promptly.


Have additional questions regarding this update?  Contact a member of the BMT team.