Google has released a new security update for its Chrome browser to fix a zero-day vulnerability (the third in a week). The vulnerability is being used in attacks.
The vulnerability is tracked as CVE-2024-4947 and is fixed in version 125.0.6422.60/.61 for Mac/Windows and 125.0.6422.60 (Linux) . The new versions will be released to all users in the coming weeks. Chrome updates automatically when security updates are available . However, you can check if you are running the latest version by going to the Chrome menu > Help > About Google Chrome. Let the update complete, then click the Relaunch button to install it.
See also: Google: Emergency updates to fix Chrome zero-day
The new Chrome zero-day vulnerability is caused by a type confusion in the Chrome V8 JavaScript engine. It was reported to Google by Vasily Berdnikov and Boris Larin of Kaspersky.
Such vulnerabilities can be exploited by hackers in various ways, but the most dangerous is arbitrary code execution on targeted devices.
Google confirmed that the CVE-2024-4947 flaw was used in attacks, but did not provide further details.
"Access to error and links may remain limited until the majority of users are updated with a fix," Google said.
“We will also maintain restrictions if the bug exists in a third-party library that other projects depend on, which has not yet been fixed,” he added.
See also: Google: Fixes new zero-day vulnerability in Chrome browser
Google Chrome: Seventh zero-day vulnerability to be fixed by 2024
This is the seventh Chrome zero-day vulnerability that Google has patched since the beginning of the year. Previous vulnerabilities were:
- CVE-2024-0519
- CVE-2024-2887
- CVE-2024-2886
- CVE-2024-3159
- CVE-2024-4671
- CVE-2024-4761
The new Chrome vulnerability, as well as the other zero-days that were patched in 2024, are particularly concerning. It is important to updates promptly security.
See also: PoC exploit released for RCE zero-day on DIR-X4860 routers
Fixing vulnerabilities prevents them from being exploited by malicious users. In addition, Chrome security updates increase confidence user in the browser. Users can be confident that Google takes their security seriously and does everything it can to ensure it.
Finally, these fixes ensure that Chrome remains compatible with the latest technological developments and security. This is particularly important for maintaining the efficiency and reliability of the browser.
Source: www.bleepingcomputer.com
