LUCAMEA memory corruption vulnerability has been found in the Paint component of Chromium, the open-source engine that powers both Google Chrome and Microsoft Edge. Memory corruption flaws can potentially allow an attacker to run malicious code on a affected machine, though the practical risk depends on how the flaw is actually exploited. Google has issued a fix through Chrome, and Microsoft has picked up the same fix for Edge.
What this means for your business
If your staff use Chrome or Edge for day-to-day work, you'll want to make sure both browsers are updated as soon as possible. In most cases updates apply automatically, but it's worth checking that no machines have been left on an older version, particularly any that aren't restarted regularly. If you're unsure whether your devices are current, get in touch and we can check.