
Update Chrome now to patch actively exploited zero-day
https://arstechnica.com/information-technology/2022/08/update-chrome-now-to-patch-actively-exploited-zero-day/
Google announced an update on Wednesday to the Stable channel of its Chrome browser that includes a fix for an exploit that exists in the wild.
CVE-2022-2856 is a fix for "insufficient validation of untrusted input in Intents," according to Google's advisory. Intents are typically a way to pass data from inside Chrome to another application, such as the share button on Chrome's address bar. As noted by the Dark Reading blog, input validation is a common weakness in code.