Google announces critical Chrome flaw, urging immediate updates

Secret flaw pushes Google to roll out Chrome updates for Windows, Mac and Linux

Security specialist Sophos has issued an urgent warning to Chrome users after discovering an alarming security flaw present across Windows, Mac and Linux.

While the bug itself remains a secret, Google has shared the exploit’s codename CVE-2020-6457 along with a brief description: “Use after free in speech recognizer.” It's worth mentioning, that after some digging, the US government’s National Vulnerability Database has marked this mysterious flaw as “Reserved.”

Sophos explained this further: "In some cases, use-after-free bugs can allow an attacker to change the flow of control inside your program, including diverting the CPU to run untrusted code that the attacker just poked into memory from outside, thereby sidestepping any of the browser’s usual security checks or ‘are you sure’ dialogs.

“That’s the most serious sort of exploit, known in the jargon as RCE, short for remote code execution, which means just what it says - that a crook can run code on your computer remotely, without warning, even if they’re on the other side of the world.”

Should Sophos’ assessment be accurate, it would come as no surprise that Google would want to keep the details of this exploit under wraps until most Chrome and Chromium users have updated their browsers.

Google is currently rolling out Chrome 81.0.4044.113 on Windows, Mac, and Linux. To check your version of Chrome, select the hamburger menu in the top right corner of your browser, then click “Help “ and “About Google Chrome.” 

If you’re not running the most recent version of Chrome, we recommend updating your browser immediately. That said, your browser should update automatically once you check the version in the “About Google Chrome” page.

Featured Resources

How to scale your organisation in the cloud

How to overcome common scaling challenges and choose the right scalable cloud service

Download now

The people factor: A critical ingredient for intelligent communications

How to improve communication within your business

Download now

Future of video conferencing

Optimising video conferencing features to achieve business goals

Download now

Improving cyber security for remote working

13 recommendations for security from any location

Download now

Most Popular

How to build a CMS with React and Google Sheets
content management system (CMS)

How to build a CMS with React and Google Sheets

24 Feb 2021
How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

26 Feb 2021
How to connect one, two or more monitors to your laptop
Laptops

How to connect one, two or more monitors to your laptop

25 Feb 2021