- A recently discovered vulnerability has seen a number of browser makers issue critical security patches.
- The vulnerability reportedly gives hackers access to your device to run malicious code.
- The likes of Google, Microsoft, Mozilla, and Brave have already issued browser patches.
We will keep this story fairly short, but if you make use of the internet via a browser, you’re going to want to update as soon as possible.
This as a recently discovered vulnerability, initially disclosed by Stack Diary, in which an unauthorised user can gain access to your system in order to run malicious code.
Some of the companies behind the biggest browsers on the planet have already issued critical security patches in order to address said vulnerability, including Google, Microsoft, Mozilla, and Brave.
Per The Verge, the patched versions of the browsers are as follows:
- “Google: Chrome version 116.0.5846.187 (Mac / Linux); Chrome version 116.0.5845.187/.188 (Windows)
- Mozilla: Firefox 117.0.1; Firefox ESR 102.15.1; Firefox ESR 115.2.1; Thunderbird 102.15.1; Thunderbird 115.2.2
- Microsoft: Edge version 116.0.1938.81
- Brave: Brave Browser version 1.57.64″
As such, all the companies are advising users to update their browser’s system to the above versions as soon as possible.
Apple released a similar patch earlier this week, across most of its software ecosystems. In its notes, the company highlighted that, “Processing a maliciously crafted image may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.”
It also work pointing out that the vulnerability has already been actively exploited in the wild, with the US’ National Vulnerability Database classifying it as severe.
On top of this, Stack Diary reports that this vulnerability is not solely limited to browsers, as certain applications suffer from the same issue.
“This vulnerability doesn’t just affect web browsers, it affects any software that uses the libwebp library. This includes Electron-based applications, for example – Signal,” the developer site’s post explained.
[Image – Photo by Omid Armin on Unsplash]
