Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited Vulnerability

Google on Tuesday introduced updates to repair 4 security issues in its Chrome browser, which includes an actively exploited zero-day flaw.

The issue, tracked as CVE-2024-0519, worries an out-of-bounds memory access in the V8 JavaScript and WebAssembly motor, which can be weaponized by danger actors to trigger a crash.

“By reading through out-of-bounds memory, an attacker could be in a position to get mystery values, these as memory addresses, which can be bypass safety mechanisms such as ASLR in get to strengthen the dependability and likelihood of exploiting a independent weak point to realize code execution as an alternative of just denial of provider,” according to MITRE’s Typical Weak spot Enumeration (CWE).

✔ Approved Seller From Our Partners

Protect your privacy by Mullvad VPN. Mullvad VPN is one of the famous brands in the security and privacy world. With Mullvad VPN you will not even be asked for your email address. No log policy, no data from you will be saved. Get your license key now from the official distributor of Mullvad with discount: SerialCart® (Limited Offer).

➤ Get Mullvad VPN with 12% Discount

Extra specifics about the nature of the attacks and the threat actors that may well be exploiting them have withheld in an endeavor to protect against additional exploitation. The issue was documented anonymously on January 11, 2024.

“Out-of-bounds memory access in V8 in Google Chrome prior to 120..6099.224 permitted a remote attacker to potentially exploit heap corruption by using a crafted HTML web page,” reads a description of the flaw on the NIST’s National Vulnerability Databases (NVD).

The advancement marks the initially actively exploited zero-working day to be patched by Google in Chrome in 2024. Previous year, the tech giant solved a whole of 8 these types of actively exploited zero-days in the browser.

Users are advisable to update to Chrome edition 120..6099.224/225 for Windows, 120..6099.234 for macOS, and 120..6099.224 for Linux to mitigate potential threats.

Buyers of Chromium-primarily based browsers these kinds of as Microsoft Edge, Courageous, Opera, and Vivaldi are also encouraged to implement the fixes as and when they come to be obtainable.

Discovered this write-up appealing? Adhere to us on Twitter  and LinkedIn to examine much more distinctive written content we publish.