Google has effectively updated its browser to a newer version, fixing a critical vulnerability, called CVE-2022-4135. According to recent information, this vulnerability concerns your hardware and more specifically your GPU.
CVE-2022-4135 Vulnerability Fixed In Google Chrome Version 107.0.5304.121
The most recent update of Google Chrome is believed to fix the CVE-2022-4135 vulnerability, as reported by researchers at National Institute of Standards and Technology (NIST for short).
CVE-2022-4135 – What Is It & In-Depth Information
The newly discovered CVE-2022-4135 vulnerability is categorized by researchers as a critical type of issue for Google Chrome. Prior to version 107.0.5304.121 of the browser, the vulnerability gives the ability of an attacker, who has gained access to the rendering processes to run a sandbox escape attack using an illegally modified web page, coded in HTML.
This results in a heap buffer overflow, which affects mainly the GPU (Graphic Processing Unit or Video Card for short) and causes it to overflow. The possible misuses of this vulnerability could be:
- It can be exploited to take control of your GPU and use it to mine for cryptocurrencies.
- It can be used to hack and damage your GPU or cause BSOD.
- Malware infection could occur because of the affected GPU.
The vulnerability has been initially detected at 11/24/2022 and security experts rank it among the high severity level vulnerabilities for Google Chrome browser. Recommendations are to update Chrome or any Chromium-based browser for that matter to the following version:
Chrome on macOS 107.0.5304.121 2022-11-25
Chrome on Linux 107.0.5304.121 2022-11-25
Chrome on Android 107.0.5304.141 2022-11-25
Chrome on iOS 107.0.5304.101 2022-11-09
Ventsislav Krastev
Ventsislav is a cybersecurity expert at SensorsTechForum since 2015. He has been researching, covering, helping victims with the latest malware infections plus testing and reviewing software and the newest tech developments. Having graduated Marketing as well, Ventsislav also has passion for learning new shifts and innovations in cybersecurity that become game changers. After studying Value Chain Management, Network Administration and Computer Administration of System Applications, he found his true calling within the cybersecrurity industry and is a strong believer in the education of every user towards online safety and security.
Follow Me: