Initially, Windows 7 had been left out of the picture. If so, it would seem to imply that Google gave Microsoft a 90-day advance notice about the vulnerability. Google indicated that it had notified Microsoft about the Windows 7 vulnerability, which was done according to Google's vulnerability disclosure policy. Google suggested that newer Windows systems could have exploit mitigations in place that aren't present in Windows 7, and recommended upgrades to Windows 10 as a security measure. On the Windows 7 vulnerability side, Google described a 'local privilege escalation in the Windows win32k.sys kernel driver that can be used as a security sandbox escape.' Exploits have only been seen in 32-bit Windows 7 systems, Google indicated. It's possible to cause the Chrome browser to seek the latest updates by going to 'Help' and selecting 'About Google Chrome.' 121 or greater to gain protections against this exploit. The aim is for all Chrome browsers to be at version.

With regard to the Chrome vulnerability, labeled 'CVE-2019-5786,' Google pushed out a software 'update for all Chrome platforms on March 1.' Users with the browser's automatic updating service turned on will get the update to protect the browser.

Google on Thursday described two 'zero-day' vulnerabilities affecting both the Google Chrome browser and Windows 7 systems that are being actively used in targeted attacks.Ī zero-day vulnerability is a software flaw that's known by attackers before the software vendor, according to a useful summary in this Sophos security blog post.

Chrome latest version windows 7 32 bit