Google released Chrome 102. In this release, Google fixed 32 security issues and added additional features. The new features include:
Chrome sends Private Network Access preflights for subresources
Chrome leverages MiraclePtr to improve security
Virtual card numbers in Autofill
Changes to URL parameters
A redesign for browser downloads
Chrome releases on Windows and Android now include multiple versions
New and updated policies in Chrome browser
Details on all of these features can be found on the Chrome Status page. As always, Google takes its time with putting our a larger blog post covering the most important changes however, you can find a very brief summary on the Chrome release page.
With the report below, you can easily find which computers in your network do not have this latest Chrome version installed. Simply run the report to get a complete overview of your environment.
Run our Chrome 102 Query
Severity
CVE
Description
Critical
CVE-2022-1853
Use after free in Indexed
High
CVE-2022-1854
Use after free in ANGLE.
High
CVE-2022-1855
Use after free in Messaging.
High
CVE-2022-1856
Use after free in User Education.
High
CVE-2022-1857
Insufficient policy enforcement in File System API.
High
CVE-2022-1858
Out of bounds read in DevTools.
High
CVE-2022-1859
Use after free in Performance Manager.
High
CVE-2022-1860
Use after free in UI Foundations.
High
CVE-2022-1861
Use after free in Sharing.
Medium
CVE-2022-1862
Inappropriate implementation in Extensions.
Medium
CVE-2022-1863
Use after free in Tab Groups.
Medium
CVE-2022-1864
Use after free in WebApp Installs.
Medium
CVE-2022-1865
Use after free in Bookmarks.
Medium
CVE-2022-1866
Use after free in Tablet Mode.
Medium
CVE-2022-1867
Insufficient validation of untrusted input in Data Transfer.
Medium
CVE-2022-1868
Inappropriate implementation in Extensions API.
Medium
CVE-2022-1869
Type Confusion in V8.
Medium
CVE-2022-1870
Use after free in App Service.
Low
CVE-2022-1871
Insufficient policy enforcement in File System API.
Low
CVE-2022-1872
Insufficient policy enforcement in Extensions API.
Low
CVE-2022-1873
Insufficient policy enforcement in COOP.
Low
CVE-2022-1874
Insufficient policy enforcement in Safe Browsing.
Low
CVE-2022-1875
Inappropriate implementation in PDF.
Low
CVE-2022-1876
Heap buffer overflow in DevTools.
Google Chrome 102 CVEu00a0 Codes
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 102 Then
'Up to date'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 102 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 5005 Then
'Up to date'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 102 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 5005 And
Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 61 Then
'Up to date'
Else 'Out of date'
End As [Patch Status],
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftware.Lastchanged,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 102 Then
'#d4f4be'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 102 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 5005 Then
'#d4f4be'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 102 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 5005 And
Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 61 Then
'#d4f4be'
Else '#ffadad'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%Google Chrome%' And
tblSoftwareUni.SoftwarePublisher Like '%Google%' And tblState.Statename =
'Active'
