Find Chrome Installations Vulnerable to Actively Exploited 0-day
Google released Chrome 99.0.4844.84, a security focussed release with only 1 security fix only a few days before Chrome 100 is due to release. CVE-2022-1096 is listed as a “Type Confusion in V8” vulnerability and is being actively exploited, so updating is required as soon as possible to protect your environment.
The report below provides a full list of all assets and whether they have been updated to the latest 99.0.4844.84 release or higher. This will let you quickly identify devices that do not have an updated Chrome installation.
2022-03-31
– Updated report to be able to handle Chrome 100 and higher
Run our Chrome 99 0-day Query
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 99 Then
'Up to date'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 99 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 4844
Then 'Up to date'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 99 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 4844
And Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 84 Then
'Up to date'
Else 'Out of date'
End As [Patch Status],
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftware.Lastchanged,
Case
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) > 99 Then
'#d4f4be'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 99 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) > 4844
Then '#d4f4be'
When Cast(ParseName(tblSoftware.softwareVersion, 4) As int) = 99 And
Cast(ParseName(tblSoftware.softwareVersion, 2) As int) = 4844
And Cast(ParseName(tblSoftware.softwareVersion, 1) As int) >= 84 Then
'#d4f4be'
Else '#ffadad'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%Google Chrome%' And
tblSoftwareUni.SoftwarePublisher Like '%Google%' And tblState.Statename =
'Active'
