Severe vulnerability found in all browsers, and it's being attacked

    Severe vulnerability found in all browsers, and it's being attacked

    Severe vulnerability found in all browsers, and it's being attacked


    Last Updated: 15 Sep 2023 at 08:13

    A severe vulnerability has been found in libwebp, a code library used to render webp images, reports Stack Diary. Webp is a popular image format used by many sites on the Internet – but also by apps and some other software that use web views – and the vulnerability can be used, among other things, to run malicious code on affected devices. Worse yet, it is reportedly being actively exploited by malicious attackers.
    Severe vulnerability found in all browsers, and it's being attacked | PCWorld

    A Guy
    A Guy's Avatar Posted By: A Guy
    15 Sep 2023


  1. dalchina
    Posts : 43,010
    Win 10 Pro (22H2) (2nd PC is 22H2)
       New #1

    Thanks!
      My Computers
    Quote Quote

  3. User2468
    Posts : 295
    Windows 10 Pro
       New #2

    A lot of images can contain a malicious payload...

    Hackers can now sneak malware into the GIFs you share | Digital Trends


    Malicious GIFs can Hack WhatsApp Chats – Research Snipers

    Also, the MIME type can be changed. At my own website the code checks for that crap...

    Edit-

    +1 for Sandboxie classic. It's one of the reasons why I use it with ALL my browsers.
      My Computer
    Quote Quote

  4. Try3
    Posts : 16,955
    Windows 10 Home x64 Version 22H2 Build 19045.4170
       New #3

    PCWorld said:
    Major browsers such as Chrome, Edge, Firefox, Opera, Vivaldi, and Brave have already released security fixes
    I'm updating mine right now.

    Denis
      My Computer
    Quote Quote

  6. Steve C
    Posts : 7,906
    Windows 11 Pro 64 bit
       New #4

    Is this only fixed in the latest version of Chrome I just updated to Version 117.0.5938.89?
      My Computers
    Quote Quote

  7. A Guy
    Posts : 42,996
    Windows 10 Home 22H2
    Thread Starter
       New #5

    CVE-2023-4863 The flaw affects Google Chrome versions prior to 116.0.5845.18

    Fixed browser versions

    Vivaldi Browser Snapshot 3134.3 Stable 6.2 (3105.48)

    Security Vulnerability fixed in Firefox 117.0.1, Firefox ESR 115.2.1, Firefox ESR 102.15.1, Thunderbird 102.15.1, and Thunderbird 115.2.2

    Opera 102.0.4880.51 Stable

    Pale Moon v32.4.0.1

    Brave v1.57.64

    A Guy
      My Computers
    Quote Quote

  8. larry m Gordon
    Posts : 34
    Windows 10 home 22H2 19045.4291 64x64
       New #6

    Many thanks for the heads up guys!! Chrome, Firefox and Edge all updated ....
      My Computer
    Quote Quote

  9. eLPuSHeR
    Posts : 2,935
    Windows 10 Home x64
       New #7

    I guess Google will patch WebP code soon. That's why I prefer PNG myself.
      My Computer
    Quote Quote

 

  Related Discussions
Attacked by a McAfee imposter!
in AntiVirus, Firewalls and System Security

I'm writing this post from Kubuntu Linux, not Windows Ten, because my Windows Ten installation has been attacked by a monster in the form of a McAfee imposter. McAfee doesn't appear in the list of apps, so I can't kill it in the usual way by...
Appear to have been attacked with Bitlocker
in AntiVirus, Firewalls and System Security

Today I started my computer and shortly thereafter, Bitlocker was running and going through my drives. I am running Malwarebytes and Bitdefender. No apparent protection. I presume it is a malicious attack. Malware bytes is not helpful....
Read more: http://www.theinquirer.net/inquirer/news/3005533/google-outs-severe-microsoft-edge-vulnerability-after-firm-misses-90-day-fix-deadline
Yahoo accounts attacked.
in AntiVirus, Firewalls and System Security

I get my satellite tv and landline broadband from SKY. They have just announced on their home page that Yahoo have been the victims of a cyber attack in "late 2014". A bit slow telling us, don't you think? I cannot remember when SKY became...
Firefox Add-ons attacked
in Windows 10 News

NoScript and other popular Firefox add-ons open millions to new attack | Ars Technica
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 18:03.
Find Us




Windows 10 Forums