High Threat Security Alert (A21-10-21): Multiple vulnerabilities in Google Chrome
29 October 2021
Google released a security update to address multiple vulnerabilities in Google Chrome. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerability.
Reports indicate that the vulnerabilities (CVE-2021-38000 and CVE-2021-38003) are being exploited in the wild. You are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Google Chrome prior to version 95.0.4638.69
Successful exploitation of the vulnerabilities could lead to remote code execution on an affected system.
Users of affected systems should update the Google Chrome to version 95.0.4638.69 or later to address the issue. The update can be obtained through the auto-update mechanism or manually by visiting the "About Google Chrome" page. Concerned users should relaunch the Google Chrome to make the update effective.