Chrome 96 Audit

Find Outdated Chrome Installations

Google released Chrome 96.0.4664.45. In this release, Google fixed 25 security issues and added additional features. Some of the new features in Chrome 96 are automatic HTTPS usage of a HTTPS DNS record exists, two new Origin trials: conditional focus and priority hints, back forward cache for faster navigation to previously visited sites, enhanced content security policy and much more. Unfortunately, it seems the Chrome blog post is taking a while to put together, so until then we'll have to do with the brief listing on the Chrome release page.

Regarding security, Google fixed the following vulnerabilities:

• CVE-2021-38007: Type Confusion in V8.
• CVE-2021-38008: Use after free in media.
• CVE-2021-38009: Inappropriate implementation in cache.
• CVE-2021-38006: Use after free in storage foundation.
• CVE-2021-38005: Use after free in loader.
• CVE-2021-38010: Inappropriate implementation in service workers.
• CVE-2021-38011: Use after free in storage foundation.
• CVE-2021-38012: Type Confusion in V8.
• CVE-2021-38013: Heap buffer overflow in fingerprint recognition.
• CVE-2021-38014: Out of bounds write in Swiftshader.
• CVE-2021-38015: Inappropriate implementation in input.
• CVE-2021-38016: Insufficient policy enforcement in background fetch.
• CVE-2021-38017: Insufficient policy enforcement in iframe sandbox.
• CVE-2021-38018: Inappropriate implementation in navigation.
• CVE-2021-38019: Insufficient policy enforcement in CORS.
• CVE-2021-38020: Insufficient policy enforcement in contacts picker.
• CVE-2021-38021: Inappropriate implementation in referrer.
• CVE-2021-38022: Inappropriate implementation in WebAuthentication.

With the report below, you can easily find which computers in your network do not have this latest Chrome version installed. Simply run the report to get a complete overview of your environment.

Run our Chrome 96 Query

Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tsysAssetTypes.AssetTypename As AssetType,
tblAssets.Username,
tblAssets.Userdomain,
tsysAssetTypes.AssetTypeIcon10 As icon,
tblAssets.IPAddress,
tblSoftwareUni.softwareName As Software,
tblSoftware.softwareVersion As Version,
tblSoftwareUni.SoftwarePublisher As Publisher,
Case
When Cast(SubString(tblSoftware.softwareVersion, 0, 3) As INT) > 96 Then
'Up to date'
When Cast(SubString(tblSoftware.softwareVersion, 0, 3) As INT) = 96 And
Cast(SubString(tblSoftware.softwareVersion, 6, 4) As INT) > 4664
Then 'Up to date'
When Cast(SubString(tblSoftware.softwareVersion, 0, 3) As INT) = 96 And
Cast(SubString(tblSoftware.softwareVersion, 6, 4) As INT) = 4664
And Cast(SubString(tblSoftware.softwareVersion, 11, 4) As INT) >= 45 Then
'Up to date'
Else 'Out of date'
End As [Patch Status],
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblAssets.SP,
tblAssets.Lastseen,
tblAssets.Lasttried,
tblSoftware.Lastchanged,
Case
When Cast(SubString(tblSoftware.softwareVersion, 0, 3) As INT) > 96 Then
'#d4f4be'
When Cast(SubString(tblSoftware.softwareVersion, 0, 3) As INT) = 96 And
Cast(SubString(tblSoftware.softwareVersion, 6, 4) As INT) > 4664
Then '#d4f4be'
When Cast(SubString(tblSoftware.softwareVersion, 0, 3) As INT) = 96 And
Cast(SubString(tblSoftware.softwareVersion, 6, 4) As INT) = 4664
And Cast(SubString(tblSoftware.softwareVersion, 11, 4) As INT) >= 45 Then
'#d4f4be'
Else '#ffadad'
End As backgroundcolor
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%Google Chrome%' And
tblSoftwareUni.SoftwarePublisher Like '%Google%' And tblState.Statename =
'Active'