• News/
  • https://www.zdnet.com/article/you-should-probably-update-your-google-chrome-browser-this-weekend/

You should probably update your Google Chrome browser this weekend

ZDNet
·
Jack Wallen
·
Published Dec 2, 2023
·
Updated

If you are one of the millions of worldwide Chrome users, it's time for yet another update. That's right, a sixth zero-day exploit has been discovered in Chrome and, fortunately, the update was released shortly after. If you're uncertain as to what a zero-day vulnerability is, it's simply a vulnerability that has been discovered but not yet patched. Also: Android's September security update fixes actively exploited zero-day and more The exploit in question is CVE-2023-6345 and does exist in the wild. According to Tenable, the official description of this vulnerability is, "Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)." The Chrome Stable channel has been updated to 119.0.6045 for both Linux and Mac and 119.0.6045.199/.200 for Windows. Although the update hasn't been rolled out for every user, Google has confirmed it will happen over the coming days/weeks. This update includes seven different security fixes (including for the zero-day exploit), which are: It is the final vulnerability, listed above, that is the zero-day exploit. It's interesting to know that this vulnerability is listed as High and not Critical. Even so, any bug listed as High should be considered a must-patch. Other than saying this vulnerability exists in the wild, Google has been a bit hush-hush about it. You can read Google's...

Read full article

Affected Software

3 affected components
Google Chrome=119.0.6045
Google Chrome=119.0.6045.199
Google Chrome=119.0.6045.200
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203