Google Chrome Users Should Update to Chrome 88 Right Now

Google released the latest version of the its Chrome web browser yesterday (88.0.4324.150), and Chrome 88 is a very important update all users should grab immediately.

As ZDNet reports, Chrome 88 fixes a zero-day vulnerability known as CVE-2021-21148. It was reported by security researcher Mattias Buelens on Jan. 24, but Google discovered it was being exploited by hackers before the vulnerability could be patched out of the browser.

The exploit allowed Chrome users to be targeted by malicious code thanks to a memory corruption problem in Google's V8 JavaScript engine, which forms part of the Chrome browser. Although Google hasn't confirmed it, the exploit is thought to be what allowed security researchers to be targeted by North Korean hackers on social media last month.

Microsoft Threat Intelligence Center attributed the targeted campaign to ZINC, "a DPRK-affiliated and state-sponsored group."

If you haven't updated to Chrome 88, then your browser remains susceptible to the exploit. If you want evidence of how serious of a vulnerability it is, Google is restricting access to the bug details "until a majority of users are updated with a fix."