>
Google is rolling out version 107 of its Chrome browser, which adds a variety of additions under the hood and makes some key tweaks to better protect you on the web.
Because of the 14 separate security fixes in Chrome 107, we strongly recommend that you download the update as soon as it’s available to you. The main one revolves around a zero-day vulnerability called CVE-2022-3723 (opens in new tab). It is a Type Confusion error affecting Chrome’s V8 JavaScript engine. As it is described by cybersecurity company Avertium (opens in new tab)the flaw allows malicious parties to “trick” the browser into running malware and trick users into thinking it is legitimate data.
Avertium states that while Chrome V8 engine attacks are uncommon, they are among the most dangerous. And it looks like this is the third time Google has patched a Type Confusion bug this year. One took place in March and the other in April (opens in new tab).
Concerning the rest of the security patch (opens in new tab), things are not so serious. You will see solutions for data validation and for browser extensions. But since there are billions of Chrome users, there are many opportunities for bad actors to use. We repeat: update the browser.
The rest of the update (opens in new tab) is more focused on future-proofing Chrome. HEVC (High Efficient Video Coding) is now partially supported in the browser. HEVC, also known as H.265, is a codec that compresses files more efficiently to speed up download times. It is more commonly seen on electronic devices. With this update, Chrome joins Safari and Microsoft Edge as the only major web browsers with HEVC support.
Video conferencing tools are also undergoing some changes (opens in new tab) to make them more user-friendly. Developers of these tools can now add a button that allows people to switch between tabs when sharing their screen. It’s essentially a keyboard shortcut of sorts to avoid having to dig through a ton of tabs. Chrome 107 also warns you if you’re sharing the same tab where you video conference. Doing this will give you a “hall of mirrors” effect, according to the patch notes.
Other reports claim that there are additional features in the update, but we couldn’t find them. android police (opens in new tab) states that Chrome now has the ability to import passwords from a third-party password manager or other browsers. And apparently the Media Browser for Chrome 107 on Android has been updated. We contacted Google to see if this is true and if there are any other hidden features. This story will be updated if we hear anything.
Availability
You can download the update by going to “About Google Chrome” in the browser menu to install it automatically. Despite the slew of security fixes in the update, Google still has its work cut out for it. Recent reports claim that 300 new security vulnerabilities were discovered in Chrome this year alone. There may be another very serious Type Confusion bug waiting to be discovered.
We recommend being proactive in this case. To better protect yourself, check out TechRadar’s best internet security suites for 2022.