{"id":47379,"date":"2022-07-05T02:57:55","date_gmt":"2022-07-05T02:57:55","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/google-updates-chrome-to-squash-actively-exploited-webrtc-zero-day\/"},"modified":"2022-07-05T02:57:55","modified_gmt":"2022-07-05T02:57:55","slug":"google-updates-chrome-to-squash-actively-exploited-webrtc-zero-day","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/google-updates-chrome-to-squash-actively-exploited-webrtc-zero-day\/","title":{"rendered":"Google updates Chrome to squash actively exploited WebRTC Zero Day"},"content":{"rendered":"

Google has issued an unexpected update to its Chrome browser to address a zero-day WebRTC flaw that is actively being exploited.<\/p>\n

The culprit is CVE-2022-2294, and is a problem in WebRTC \u2013 the code that imbues browsers with real-time comms capabilities.<\/p>\n

Details of the flaw, number 1341043, are not currently detailed in the Chromium project bug log, and details of the CVE have not been published at the time of writing. But Google’s notification<\/a> of a new browser version describes it as: “Heap buffer overflow in WebRTC. Reported by Jan Vojtesek from the Avast Threat Intelligence team on 2022-07-01.”<\/p>\n