Google has released a new version of their Chrome browser to patch a critical zero-day vulnerability that has been actively exploited in-the-wild. The flaw, tracked as CVE-2022-3075, is an insufficient data validation in Mojo for Chromium, a collection of runtime libraries providing an Inter-Process Communication (IPC) framework. An IPC framework is a mechanism allowing different processes in different languages to communicate with each other and synchronize their actions through shared memory and message passing. As of this publication, the new version of Chrome has rolled out in the Stable Desktop Channel for Windows, Mac, and Linux users. This vulnerability was anonymously reported. At this time, Google is not releasing the technical details in order to allow the patch to reach their entire Chrome user base in the coming weeks. This flaw marks the sixth (6) Chrome zero-day patched in 2022, and they have been exploited by state-sponsored and financially motivated threat actors alike. CTIX analysts urge all Chrome users to ensure they are already running version 105.0.5195.102 through the Help > About Chrome option within Google Chrome. This vulnerability will be closely monitored, and an update may be published in the coming weeks as technical details and/or proof-of-concept (PoC) exploits become public.