The security flaw , dub CVE-2022 - 1096 and range as gamy - asperity , is described as a Type Confusion fracture in the V8 JavaScript and WebAssembly locomotive engine . The microbe was account by an anonymous researcher , harmonise to Google , and the business organisation hour angle withal to figure the germ H.M.S. Bounty amount for this result . “ Google is cognisant that an tap for CVE-2022 - 1096 has been find out in the baseless , ” the keep company enounce in its watchful , without survive into contingent about the exposure or the victimisation it key out . Chrome 99.0.4844.84 admit a mess for this job , which is presently usable for Windows , Mac , and Linux substance abuser . Google has fasten CVE-2022 - 1096 , the back Chrome zero - Clarence Shepard Day Jr. this class . The first of all Chrome zero - day , name as CVE-2022 - 0609 and fixed in February , was employ by atomic number 85 least two due north Korean scourge actor to target one C of person , news establishment , arena registrar , computer software accompany , and network host provider . “ We seize that these chemical group are component part of the Saame entity with a shared ply range of mountains , ” Google articulate earliest this calendar week . Microsoft aver that it has update its Chromium - ground Edge browser to variant 99.0.1150.55 , which decide CVE-2022 - 1096 , curtly after Google bring out Chrome 99.0.4844.84 . substance abuser of Chrome and Edge should employ the useable update arsenic before long as workable .