Replace Edge and Chrome browsers now to keep away from ANGLE exploits

ANGLE, or Nearly Native Graphics Layer Engine was a characteristic launched by Google in 2010 to permit Chromium browsers operating WebGL content material with out the necessity for OpenGL drivers.

Nonetheless, because it has been found, ANGLE had a vital vulnerability, CVE-2024-2883, permitting attackers to use heap corruption utilizing a HTML web page, ghacks.internet experiences.

Use after free in ANGLE in Google Chrome previous to 123.0.6312.86 allowed a distant attacker to doubtlessly exploit heap corruption through a crafted HTML web page. (Chromium security severity: Crucial)

Microsoft up to date Edge and Google up to date Chrome

Microsoft launched an pressing Edge replace to model 123.0.2420.65 which patches this vulnerability, but in addition factors out that each one the Chromium-based browsers have the identical downside.

Within the abstract, of this vulnerability report, Microsoft additionally acknowledges that the CVE was assigned by Chrome and that it has been exploited:

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for extra data.

Google is conscious that an exploit for CVE-2024-2883 exists within the wild.

Nonetheless, surprisingly sufficient, though Google additionally up to date Chrome to model 123.0.6312.86/.87 to patch this vulnerability, they don’t appear to learn about any such exploits. In addition they restricted the entry to bug particulars to guard the customers who didn’t replace the browser but.

Word: Entry to bug particulars and hyperlinks could also be saved restricted till a majority of customers are up to date with a repair. We can even retain restrictions if the bug exists in a 3rd celebration library that different initiatives equally depend upon, however haven’t but mounted.

Regardless, you need to replace your browser now to the newest model to keep away from this difficulty. For Chrome, go to Settings > About Chrome and the browser will carry out an replace routinely. In Edge, go to Settings > About Microsoft Edge to do the identical.

When you have one other Chromium-based browser reminiscent of Vivaldi or Courageous, you also needs to replace it swiftly. After that, restart the app for the modifications to take impact.

Did you obtain the newest replace? Tell us in the event you had any issues within the feedback part under.

Claudiu Andone

Home windows Toubleshooting Skilled

Oldtimer within the tech and science press, Claudiu is targeted on no matter comes new from Microsoft.
His abrupt curiosity in computer systems began when he noticed the primary Residence Laptop as a child. Nonetheless, his ardour for Home windows and every little thing associated grew to become apparent when he grew to become a sys admin in a pc science highschool.
With 14 years of expertise in writing about every little thing there may be to learn about science and expertise, Claudiu additionally likes rock music, chilling within the backyard, and Star Wars. Might the power be with you, all the time!