Chrome 102 Patch 32 Weaknesses

Following the release of Chrome 101 just over a month ago, Google is preparing to promote Chrome 102 in its place. The new Chrome release is full of developer-based features, which is not a negative. Instead, it means that online programs and applications will become stronger in the next few years.

Chrome 102 includes more web app improvements, new keyboard shortcuts for tabs, and important information about online retailers. Some of these improvements are discussed below.

Intelligent shortcuts for Android

Many Chrome 101 Android users have noticed a new Smart Third shortcut to the right of the address bar, and it’s safe to assume that Google Chrome 102 will improve it. Depending on what you use the most, the shortcut will display a button for sharing, voice search, or launching a new tab.

You can rearrange tabs with keyboard shortcuts

Switching between tabs and scrolling back and forth in your browsing history are just some of the things you can do with your keyboard in Chrome. Another much-needed keyboard shortcut is finally joining the list of existing ones.

You can now use your keyboard to rearrange tabs This feature is only available in Chrome 102 for Windows and macOS. To move a tab, use ctrl + shift and then either page up or page down. You need to use ctrl + shift + fn with an arrow up or down on a Mac keyboard.

Online store information and ratings

This is one of the few user-friendly changes that Google is working on for this version. Google is experimenting with providing more information about online stores that users have never visited before, making it easier to evaluate whether a store is genuine and to give them access to Google ratings.

Chrome 102 vulnerabilities

Despite these improvements, Chrome 102 has patched 32 vulnerabilities, including serious vulnerabilities discovered by anonymous researchers.

Serious security error, also known as CVE-2022-1853, is a post-use error that affects indexed DB. So far, Bug Bounty has not yet been determined for this vulnerability.

Chrome 102 is also working to resolve eight high-intensity errors discovered by other outside researchers. Another serious weakness is CVE-2022-1854, a post-use error that affects the browser’s ANGLE component. On May 12, researcher Seonghuan Park discovered the problem, winning a পুরস্কার 10,000 prize from Google.

Use-After-Free (UAF) is a weakness that occurs when dynamic memory is misused during program execution. Suppose a program does not delete a memory address pointer after it has been released. An attacker may use errors to hijack a program, resulting in data corruption, a DoS attack, or arbitrary code execution.

Several researchers have benefited from discovering their vulnerabilities in the new Chrome 102. For example, a researcher who discovered a use after a free messaging vulnerability tracked as CVE-2022-1855 earned $ 7,500, while one who discovered it as CVE-2022-1856 was paid $ 3,000 in user education.

External researchers have identified fifteen weaknesses rated as “moderate” or “low”. It is noteworthy that three medium-intensity errors were paid 5,000, while one low-intensity error was paid $ 7,000.

While there is no evidence that these bugs have been used in malicious attacks, users must keep their browsers up to date because threat actors often use them in their activities.

According to Google, three Chrome vulnerabilities have been used in the attack so far this year.

In March, Google acknowledged that Chrome had increased Zero-Day exploits, with 14 security bugs exploited in 2021. In its defense, the company said that some of the factors contributing to the trend include Chrome’s popularity, improved transparency, the need to link many vulnerabilities to a single exploit, and the web browser becoming more sophisticated.

While it is impossible to create a perfect web browser, the Google team must always enhance their game to protect users. Weaknesses can cause significant damage, especially as cyber attackers take advantage of these flaws.