Security updates for Chromium-based browsers – PC-WORLD

Frank Zieman

On July 5th, Google released a security update for Chrome. In it, the Google developers have fixed four security vulnerabilities, including a 0-day vulnerability with CVE-2022-2294, which is already being exploited for attacks. Several manufacturers of Chromium-based browsers have now followed suit and updated their software. So far these are Brave, Vivaldi and Opera. Microsoft (Edge) is not as fast as the competition.

exceptionally

Opera

in this case responds first. However, the July 5 update to Opera 88.0.4412.74 only closes the 0-day vulnerability CVE-2022-2294. The Opera developers apparently only got the corresponding patch from Chromium 102.0.5005.148 from the

Extended Stable Channel

picked it out (“cherry-pick” as they call it) and integrated it into the otherwise still Chromium 102.0.5005.115-based code. A number of known vulnerabilities remain untreated. A remedy can only be expected with Opera 89, which is currently in the beta stage.

Vivaldi

followed a few hours later, but chose a slightly different route. Vivaldi 5.3.2679.68 simply contains Chromium 102.0.5005.149 from the Extended Stable Channel. However, only the 0-day vulnerability CVE-2022-2294 has been eliminated. Here, too, some already known security gaps are not eliminated. This also applies to Vivaldi 5.3.2683.47 for Android. It is possible that all previously known vulnerabilities will only be fixed with Vivaldi 5.4, which will be released in August based on Chromium 104.

▶The latest security updates

brave

also released its new browser version 1.40.113 on July 5th. Like Chrome, it is based on Chromium version 103.0.5060.114 and is also available for Android. Brave is thus the only browser besides Chrome in which all currently known Chromium vulnerabilities have been eliminated.

So far, Microsoft has only responded with the usual blog entry that they are informed about the 0-day vulnerability and are “actively” working on an update. The current Edge version 103.0.1264.44 from June 30 contains Chromium 103.0.5060.53 from June 21 (according to Microsoft’s security report) or 103.0.5060.66 from June 27 (according to the user agent). Apparently, there is again disagreement about this in Redmond.

Chromium-based browsers at a glance: