Another day, another Chrome vulnerability. This time, Google has discovered a zero-day that allows for remote code execution. Even more concerning, this vulnerability is actively being exploited in the wild.
While details on CVE-2019-5786 are thin, the message is clear: patch now. An earlier Chrome patch to version 72.0.3626.121 resolves the problem. If you’ve already updated, have Automox policies in place, or auto-update Chrome frequently, you should be secure. If not, Automox can help.
How do I patch Chrome on my devices with Automox?
You can easily use the Automox platform to find out if you are at risk and to instantly patch the Chrome vulnerability on your impacted systems to quickly mitigate the security risk. To do so, follow this brief process:
Log in to the console and click on the ‘Software’ icon found in the left navigation pane. In the search box on the ‘Software’ page, simply type ‘Chrome’ and hit enter. You’ll see in the example below that there are 3 endpoints that have potentially been impacted:
By looking closer, you’ll see that the ‘State’ for each of these endpoints is set to ‘Patch on schedule’ which means they will be automatically patched whenever the package is available. To patch the systems immediately, you can use the Actions dropdown to select ‘Patch Now’.
Automox can help ensure your systems are adequately patched in a timely manner in order to protect your organization against any vulnerability such as Chrome discussed here in detail. As a best practice, you should always ensure that you have at least one patch policy assigned to all of your devices for Critical, Medium, and Low severity patches. These updates are generally Security and Cumulative software updates. Automox is designed to automate your response to zero-day vulnerabilities like this and others across the Windows, Mac, and Linux operating systems.
Current Automox customers can create policies that automatically handle the patching and execution of important updates for you every single month. Alternatively, you may contact our support team for any technical assistance at firstname.lastname@example.org.
If you are not currently an Automox customer, we invite you to sign up for a free 15-day trial of our cloud-based, automated patch management solution. Visit www.automox.com/signup to get started.