Maximize your protection, eliminate business risks.
Optimize and modernize with cloud transformation.
Empower your people to work securely from anywhere.
What it takes to convince leadership that migrating to the cloud is the right move.
Let us handle IT so you can focus on growing your business.
Get multichannel 24/7/365 expert end-user support.
Stay ahead of attacks with 24/7 protection and monitoring.
Maximize uptime with with industry-leading DRaaS.
Improve efficiency, productivity and outcomes with cloud.
Ensure all mobile devices, everywhere, are secure.
Gain a competitive edge with strategic IT solutions.
This battle-tested checklist enables your team to swiftly initiate a ransomware response.
IT for businesses of all sizes, in any industry.
Empower institution growth with custom IT solutions.
Ensure your firm is always in compliance.
Improve patient care and staff morale.
Deal with pressing legal matters, not IT.
Keep up with the evolving digital landscape.
Focus on your mission by outsourcing IT.
Accelerate PE client deals and secure data.
Leverage your technology as a strategic asset.
Execute initiatives and develop IT strategies.
Get the latest industry insights and trends.
Join us at events in person and online.
Hear from clients and learn more about strategic IT.
See how Dataprise can make IT your greatest asset.
Get informative technical resources from IT experts.
Stay on stop of emerging cybersecurity threats.
Discover the key areas of DR your organization needs to address to ensure downtime is minimized.
Gain a strategic asset by bringing harmony to IT.
Ensure 24/7 support and security with dedicated teams.
Drive business forward by partnering with Dataprise.
Meet our one-of-a-kind leadership team.
Discover the recognition Dataprise has earned.
Help us help businesses with strategic IT.
Embracing different perspectives and backgrounds.
Find a Dataprise location near you.
Dataprise is committed to empowering more women to consider a career in technology.
Defense Digests
Table of content
On March 23, 2022 an anonymous user reported a Type Confusion vulnerability in the Google Chrome browser. On March 29, 2022, Google released a new version of their popular Chrome browser to patch the zero-day vulnerability in the Chrome browser for Windows, macOS, and Linux. Microsoft also confirmed that it’s chromium-based Edge browser was susceptible to the same zero-day vulnerability. With the discovery that Chromium-based browsers are also affected, alternative browsers including Brave, Amazon Silk, Opera, Samsung Internet, Vivaldi, and Yandex are all affected by this vulnerability.
Specific details about this vulnerability are being held by Google until the majority of browsers have been patched, to limit the exposure and potential compromises once the exact vulnerability is detailed to the public. The large number of affected browser products across a wide-variety of platforms does make this a high impact vulnerability.
A type confusion vulnerability exists when a program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. When the program accesses the resource using an incompatible type, this could trigger logical errors because the resource does not have expected properties. In languages without memory safety, such as C and C++, type confusion can lead to out-of-bounds memory access.
This specific type confusion vulnerability is in V8, Chrome’s JavaScript engine. V8 is also used server-side in Node.js, however, the Node.js team has not confirmed the vulnerability exists in their product yet.
Use the Update feature in your Chrome browser, or use a third-party patch management solution to apply the latest Chrome build for your Windows, macOS, and Linux operating systems to remediate the vulnerability.
INSIGHTS
Subscribe to get real-time notifications when a new Dataprise Defense Digest is published.