Google has released a new security update for its Chrome browser to fix a zero-day vulnerability . It is the third Chrome zero-day vulnerability that has been used in attacks this year.
Google has been notified of an exploit for the CVE-2023-3079 in Chrome. However, the company has not provided details about the exploit and how it was used in attacks. Google has a habit of withholding technical information when a new security. This is to protect users. The company is giving users time to apply security updates before malicious users use the details to develop additional exploits.
See also: New zero-day MOVEit Transfer is being exploited massively in data theft attacks
“Access to details and links related to the bugmay remain restricted until the majority of users have deployed the fix. We will also maintain restrictions if the bug exists in a third-party library that other projects depend on,” Google says.
CVE-2023-3079 has been rated as a “high severity vulnerability” and was discovered by Google researcher Clément Lecigneon June 1, 2023. It is a type confusion bug in V8, Chrome's JavaScript engine.
Type confusion bugs can potentially lead to malicious memory manipulation and code execution.
In general, zero-day bugs are often used by state-sponsored hackers , primarily targeting high-profile individuals within the government, media, or other vital organizations. Therefore, Chrome users should install the available security update as soon as possible
See also: CISA: Warns federal agencies about recent Barracuda zero-day bug
As our reliance on technology continues to grow, the threat of zero-day bugs becomes more significant. Attackers can exploit these bugs to gain access to sensitive data or install malware on devices without you knowing.
Google says the update will roll out in the coming days/weeks, so this is a gradual rollout that won't reach everyone at once.
Update Chrome to fix zero-day bug
To start the Chrome update process manually, go to Chrome's settings menu (top right corner) and select Help → About Google Chrome.
A restart of the application is required to complete the update.
Available security updates are also installed automatically the next time the browser . You can check the “About” page to make sure you are using the latest version.
See also: Apple: Fixes three new zero-days that hack iPhones and Macs
The new stable channel release that addresses the flaw is version 114.0.5735.110 for Windows and 114.0.5735.106 for Mac and Linux.
Source: www.bleepingcomputer.com
