Google releases urgent Chrome update to fix actively exploited zero-day vulnerability2023-04-16 19:32 by Daniela
Google has released an emergency Chrome security update to address the first zero-day vulnerability exploited in attacks since the start of the year. Tracked as CVE-2023-2033, the high-severity vulnerability has been described as a type confusion issue in the V8 JavaScript engine. Clement Lecigne of Google's Threat Analysis Group (TAG) has been credited with reporting the issue on April 11, 2023. "Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page," according to the NIST's National Vulnerability Database (NVD). "Google is aware that an exploit for CVE-2023-2033 exists in the wild," the search giant said in a security advisory published on Friday. Although a patch has now been created, the first exploits of Chrome have already begun. Users can update their browsers by clicking on the overflow menu bar in the top right corner of the browser, then selecting Help > About Google Chrome. This will trigger a browser update, which must be followed by a browser restart to ensure full protection. Read more -here-
Post your review/comments
rate:
avg:
|