A high-severity vulnerability affects 2 billion Google Chrome users. You have to protect yourself from hackers and the sooner you do that, the better.
Google Chrome has been hit with a new security vulnerability and it has affected over 2 billion users! Cybersecurity company, Imperva Red has disclosed a high severity vulnerability, dubbed CVE-2022-3656, that has affected Google Chrome and other Chromium-based browsers. The vulnerability allows the theft of sensitive files such as crypto wallets and login credentials. The cybersecurity company said that in this case, “the vulnerability was discovered through looking at how the browser interacts with the file system, specifically looking for common vulnerabilities related to how the browser behaves.” handle symbolic links.”
For the people Who don’t know, Symlinks or symbiotic links are files that point to another file. “This can be useful for creating shortcuts, redirecting file paths, or organizing files in a more flexible way,” Blog mentioned. The Imperva team explains that in this way, symlinks can also create vulnerabilities. That’s how this vulnerability affects Chrome browser Browser.
How are Chrome users at risk?
While explaining a potential attack scenario, network security The team says that the threat can create a fake electronic money Wallets and websites may require users to download their recovery key. This downloaded file will be a symlink to a folder on your computer. This file can be the login information for the cloud service provider. The saddest thing is that users will not be aware of the leak of sensitive data.
“In the attack scenario described above, an attacker would take advantage of this common practice by providing the user with a zip file containing a symlink instead of the actual recovery keys. When the user unzips and uploads the file, the symlink is processed, allowing the attacker to gain access to sensitive files on the user’s computer,” the blog mentioned.
What Chrome Users Should Do
Thankfully, there is a way that Chrome users can protect themselves from the Chrome vulnerability! The team mentioned that the fix first implemented in Chrome 107 did not completely resolve the issue. However, the issue is completely resolved in Chrome 108. Therefore, you should update your software to protect yourself against the latest vulnerabilities.
