Search engine Google has launched an emergency update for Chrome users worldwide amid a security scare.
Users have been advised to install the update as soon as possible but Google is not revealing the full extent of the flaw, which carries the codename “CVE-2020-6457.”
Researchers at cyber security specialist Sophos uncovered the vulnerability, reports ExpressOnline.
The flaw is a Remote Code Execution (RCE) that allows hackers to run commands and untrusted scripts unseen by users.
Sophos researcher Paul Ducklin said it could enable hackers “to change the flow of control inside your program, including diverting the CPU to run untrusted code that the attacker just poked into memory from outside, thereby sidestepping any of the browser’s usual security checks or ‘Are You Sure’ dialog.”
This means Google Chrome won't double-check with users before allowing hackers to run scripts leading to the risk of devastating consequences for users.
Two billions users worldwide could be affected, according to experts.
Google Chrome should keep itself updated automatically. However, anyone overly concerned can take emergency action.
To do that, launch Google Chrome on Windows 10 or macOS and click on the three-dots icon in the top right-hand corner of the browser window.
In the dropdown, select Help > About Google Chrome . That should kickstart the update process.
Once your web browser has updated, you might need to click on the Relaunch button to launch the application again.
