Google has released a patch for a critical zero-day vulnerability in their Chrome browser that has been actively exploited in-the-wild. The flaw, tracked as CVE-2022-2856, is an insufficient validation of untrusted input in Intents vulnerability. If exploited, the vulnerability could allow attackers to perform arbitrary code execution. Input validation is a technique for verifying if inputs are potentially dangerous to process or not; an attacker could exploit a flaw in input validation by maliciously crafting inputs that aren’t expected by the application, altering the order in which a computer executes statements in a script. This could allow for the attacker to take complete control of resources to conduct follow-on actions or execute arbitrary code. This flaw was identified in July 2022 by Google’s own Threat Analysis Group (TAG) and at this time, the specifics of the exploit are being withheld from the public to allow as many Chrome users as possible to update their vulnerable browsers. This patch addresses ten (10) other vulnerabilities, and the specific information can be found in the linked Google advisory. CTIX analysts recommend all Chrome users ensure they have installed the patch. If noteworthy exploit information is disclosed about this flaw in the near future, CTIX will publish an update to this piece.