Google has issued Chrome 88.0.4324.150 with to fix a 0-day vulnerability, and has also removed a malicious extension from the Web Store.
Google Chrome, which is currently the most popular browser in the world, today received a minor update to version 88.0.4324.150. And you better install it right now.
There are no major changes in this update except the hidden from a regular user’s eyes security fix. Google says that today’s update patches
CVE-2021-21148 vulnerability. There are active exploits for this bug and that's why you should update your browser as soon as possible.
For security reasons, Google limits access to all the details about this security bug until a majority of users install the update.
What is currently known is that CVE-2021-21148 relates to a heap buffer overflow in V8. This bug was reported at the end of January by Mattias Buelens.
The Great Suspender extension removal
Google also took some proactive measures to protect users from harm by a popular extension called The Great Suspender. The company says this extension contains malware and thus needs to be removed from users’ machines. Chrome automatically uninstalled it and the extension is also gone from Chrome Web Store and Edge Add-ons store.
You can replace this extension functionality with the one built-in right into your browser. For example, in a recent update, Edge received a nifty feature called “Sleeping Tabs” that puts the inactive tabs to sleep to reduce resource consumption.
Google Chrome on your computer will automatically install the update once it is available. You can also manually force it by clicking the menu button in the top-right corner.
Select Help > About. This will force Chrome to search for updates and install the latest version. Read more about Chrome’s latest security updatehere.