PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Google Patches Actively Exploited Chrome Zero-Day Vulnerability

This is the first zero-day Chrome bug Google has patched so far this year, but it probably won't be the last.

 & Nathaniel Mott Contributing Writer

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

The latest version of Google Chrome patches an actively exploited zero-day vulnerability.

"Google is aware of reports that an exploit for CVE-2022-0609 exists in the wild," the company says, referring to what it describes as a "use after free in Animation" flaw that was reported by Adam Weidemann and Clément Lecigne of Google's own Threat Analysis Group.

Google says it also patched seven other vulnerabilities (and a trio of undisclosed security flaws) with this version of Chrome (98.0.4758.102). Most of those vulnerabilities—including CVE-2022-0609—received a High rating on the company's severity scale. One received a Medium rating.

BleepingComputer notes that this is the first zero-day vulnerability in Chrome that Google has patched so far this year. It probably won't be the last, though, considering the browser's popularity. The company fixed 16 similar vulnerabilities throughout 2021.

Google says that Chrome version 98.0.4758.102 is rolling out now for Windows, Mac, and Linux on both the Stable and Extended Stable release channels; the update should reach all devices "over the coming days/weeks." Chrome users can—and should— also update manually.

About Our Expert

Nathaniel Mott

Nathaniel Mott

Contributing Writer

I've been writing about tech, including everything from privacy and security to consumer electronics and startups, since 2011 for a variety of publications.

Read full bio