Google says in its advisory that it has paid a $15,000 bug bounty reward to Nan Wang and Yong Liu of Qihoo 360 for reporting the issue last month.Īnother $13,000, Google says, has been handed out to Kaijie Xu for reporting CVE-2022-3446, a heap buffer overflow in WebSQL.Īdditionally, the internet giant paid $7,500 to Narendra Bhati of Suma Soft, who reported an inappropriate implementation in Custom Tabs (CVE-2022-3447), and $2,500 to a Kunlun Lab researcher who reported a use-after-free flaw in Permissions API (CVE-2022-3448). Google announced on Tuesday that the latest Chrome update patches six high-severity vulnerabilities, including four use-after-free bugs.Īll the newly resolved vulnerabilities were discovered by external researchers and the internet giant has handed out $38,000 in bug bounty rewards to the reporters.īased on the bug bounty amounts that Google has paid out, the most severe of the newly addressed flaws is CVE-2022-3445, a use-after-free vulnerability in Skia, the open-source 2D graphics library that serves as Chrome’s graphics engine. The SJSU IT Service Desk is available online, by phone at (408) 924-1530, or via email at.

Many other web browsers work on a similar architecture to Chrome, so we encourage you to check the update status of whatever browser you’re using and make sure your software is current.Īs always, SJSU IT is available to provide whatever assistance you may need.

We strongly encourage you to do this on every device you own to ensure that your data is kept secure from this vulnerability. Repeat step 1 and verify that the update has successfully installed.Once complete, click the Relaunch button and confirm you are now running. Chrome should immediately check for updates on its own and begin downloading and installing.Open Chrome Browser and navigate to Help → About Google Chrome.If you do not use the “Update” button, here’s how to manually update your Chrome browser to version. It’s located in the top right hand corner of your browser window and looks like this:

Google has designed Chrome to self-update, but you’ll need to push the “Update” button to complete the process. We recommend updating to the newest version as soon as possible. I’m emailing to make you aware of a recent critical security update to Google’s Chrome Browser.

New google chrome update 2022