Google Chrome Updated With Patch for Nasty Zero-Day Vulnerability Exploited by Attackers

Google Chrome has been up to date with fixes for a zero-day safety flaw that was being actively exploited within the wild, in accordance with the search large. The vulnerability impacts a part in Chrome that renders internet content material on a consumer’s display screen, permitting attackers to reap the benefits of a consumer’s pc when a consumer visits a maliciously crafted web site. Chrome customers on all desktop pc platforms might want to make sure that their browser is up to date to the most recent model so as to make sure that they’re protected.

According to particulars shared by the corporate in a weblog put up, the most recent steady variations of Google Chrome for Windows, macOS, and Linux features a repair for a safety flaw with a ‘High’ severity score. Google says it has patched a use after free vulnerability (CVE-2024-4671) is said to the Visuals part on Chrome, reported by an nameless exterior researcher.

A use after free vulnerability would enable an attacker to entry out-of-bounds-memory when a consumer visits a malicious crafted webpage, by benefiting from the vulnerability. This would enable them to entry knowledge remotely, or acquire entry to and management the system.

Notably, Google’s weblog put up additionally states that the corporate “is aware that an exploit for CVE-2024-4671 exists in the wild.” As a end result, it’s crucial that customers guarantee that they’re working on the most recent steady model of Chrome — model 124.0.6367.201/.202 for Windows and macOS, and model 124.0.6367.201 for Linux computer systems.

On Windows, customers can click on on the three-dot menu on the high proper nook of the display screen, then click on on Help > About Google Chrome, then click on on Update Google Chrome — if this button is not seen, which means the most recent model of Chrome has already been put in. macOS customers may also choose the Automatically replace Chrome for all customers choice in the identical menu to get the most recent updates, whereas Linux customers might want to get automated updates through their package deal supervisor.