If you are one of the millions of worldwide Chrome users, it's time for yet another update. That's right, a sixth zero-day exploit has been discovered in Chrome and, fortunately, the update was released shortly after. If you're uncertain as to what a zero-day vulnerability is, it's simply a vulnerability that has been discovered but not yet patched. Also: Android's September security update fixes actively exploited zero-day and more The exploit in question is CVE-2023-6345 and does exist in the wild. According to Tenable, the official description of this vulnerability is, "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)." The Chrome Stable channel has been updated to 119.0.6045 for both Linux and Mac and 119.0.6045.199/.200 for Windows. Although the update hasn't been rolled out for every user, Google has confirmed it will happen over the coming days/weeks. This update includes seven different security fixes (including for the zero-day exploit), which are: It is the final vulnerability, listed above, that is the zero-day exploit. It's interesting to know that this vulnerability is listed as High and not Critical. Even so, any bug listed as High should be considered a must-patch. Other than saying this vulnerability exists in the wild, Google has been a bit hush-hush about it. You can read Google's...
You should probably update your Google Chrome browser this weekend
ZDNet
·Jack Wallen
·Published Dec 2, 2023
·Updated
Affected Software
3 affected components
Google Chrome=119.0.6045
Google Chrome=119.0.6045.199
Google Chrome=119.0.6045.200
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses a newly discovered zero-day exploit in Google Chrome and the urgent update released to address it.
2
What security implications are discussed in relation to the Chrome exploit?
The exploit poses a significant risk as it can be exploited by attackers to compromise user security before a patch is applied.
3
What specific vulnerability type does this article refer to?
The article refers to a zero-day vulnerability, which is a flaw that is exploited by attackers before the developers are aware and can release a fix.
4
How many zero-day exploits have been reported for Chrome this year?
This is reported as the sixth zero-day exploit discovered in Google Chrome this year.
5
What should Google Chrome users do in response to this news?
Google Chrome users are advised to update their browser immediately to mitigate the risk posed by the zero-day exploit.