The Center for Internet Security says an update to Google Chrome fixes numerous vulnerabilities that could let attackers take over a computer, and everyone should install it right away.
Google has released an update for its Chrome web browser that fixes a large number of security flaws, some of which could allow an attacker to take control of a computer. The update was flagged in an advisory from the Center for Internet Security.
The problems affect versions of Chrome older than 156.0.8078.73/.74 on Windows and Mac, and versions older than 156.0.8078.73 on Linux.
According to the Center for Internet Security, the most serious of these flaws could let an attacker run their own code on a victim’s machine simply by getting them to visit a malicious or compromised website. If successful, an attacker could gain the same access the logged-in user has, which could mean installing programs, viewing or deleting files, or creating new accounts.
People who use everyday, non-administrator accounts on their computers would likely see less damage than those browsing with full administrative rights, the advisory notes.
The Center for Internet Security says there are currently no reports of these flaws being exploited in the wild, meaning no known attacks have happened yet. Still, the organization rates the risk as medium for government agencies and businesses of all sizes, and low for home users.
Because Chrome is one of the most widely used web browsers, this update affects a broad range of people, from large organizations to individuals browsing at home.
What you can do: Update Chrome as soon as possible once your device offers the update, since the fix is already available from Google. The Center for Internet Security also recommends running everyday browsing from a standard, non-administrator account rather than one with full administrative privileges, which can limit the damage if a browser flaw is ever exploited.
Based on a release from Center for Internet Security.