• News/
  • https://www.zdnet.com/article/google-issues-an-emergency-update-to-fix-yet-another-zero-day-exploit-for-chrome-heres-what-to-know/

You should probably update your Google Chrome browser this weekend

ZDNet
·
Jack Wallen
·
Published Dec 2, 2023
·
Updated

If you are one of the millions of worldwide Chrome users, it's time for yet another update. That's right, a sixth zero-day exploit has been discovered in Chrome and, fortunately, the update was released shortly after. If you're uncertain as to what a zero-day vulnerability is, it's simply a vulnerability that has been discovered but not yet patched. Also: Android's September security update fixes actively exploited zero-day and more The exploit in question is CVE-2023-6345 and does exist in the wild. According to Tenable, the official description of this vulnerability is, "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)." The Chrome Stable channel has been updated to 119.0.6045 for both Linux and Mac and 119.0.6045.199/.200 for Windows. Although the update hasn't been rolled out for every user, Google has confirmed it will happen over the coming days/weeks. This update includes seven different security fixes (including for the zero-day exploit), which are: It is the final vulnerability, listed above, that is the zero-day exploit. It's interesting to know that this vulnerability is listed as High and not Critical. Even so, any bug listed as High should be considered a must-patch. Other than saying this vulnerability exists in the wild, Google has been a bit hush-hush about it. You can read Google's...

Read full article

Affected Software

3 affected components
Google Chrome=119.0.6045
Google Chrome=119.0.6045.199
Google Chrome=119.0.6045.200

Frequently Asked Questions

1

What is the main topic of this article?

The article discusses a newly discovered zero-day exploit in Google Chrome and the urgent update released to address it.

2

What security implications are discussed in relation to the Chrome exploit?

The exploit poses a significant risk as it can be exploited by attackers to compromise user security before a patch is applied.

3

What specific vulnerability type does this article refer to?

The article refers to a zero-day vulnerability, which is a flaw that is exploited by attackers before the developers are aware and can release a fix.

4

How many zero-day exploits have been reported for Chrome this year?

This is reported as the sixth zero-day exploit discovered in Google Chrome this year.

5

What should Google Chrome users do in response to this news?

Google Chrome users are advised to update their browser immediately to mitigate the risk posed by the zero-day exploit.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203