InfoSecBulletin Cybersecurity for mankind
Google has fixed the sixth Chrome zero-day bug that was exploited in the wild this year. The flaw is identified as CVE-2023-6345.
“Google is aware that an exploit for CVE-2023-6345 exists in the wild,” Google said. This vulnerability has many risks, such as executing any code and causing crashes.
India Confirms BSNL’s Data Breach, formed committee to investigate
Malware Attacks Increase 30% in First Half of 2024
New DNS Vulnerability “TuDoor” Threatens Internet Security
Acronis Urged Users to Patch Vulnerability
OpenAI to test search engine called SearchGPT
CISA Unveils advisories for Two Industrial Control Systems
Researchers unveil ConfusedFunction Vulnerability in Google Cloud Platform
BD CIRT published advisory on Web Application and Database Security
GitLab fixed six security flaws and recommends updating shortly
Researchers Unveil Massive Quad7 Botnet Targeting Microsoft 365
Benoît Sevens and Clément Lecigne from Google’s Threat Analysis Group reported the issue on November 24, 2023.
Google updated the Stable channel version for Mac, Linux, and Windows to address a zero-day vulnerability. The upgrade will be released gradually in the coming days/weeks.
Additionally, Google has fixed six high-severity security vulnerabilities with this update.
Details Of The Vulnerabilities Addressed:
Spellcheck’s Type Confusion is a serious bug being tracked as CVE-2023-6348. It was reported by Mark Brand of Google Project Zero.
The next high-severity bug in Mojo is a use-after-free issue. It is tagged as CVE-2023-6347. The issue was reported by Leecraso and Guang Gong from 360 Vulnerability Research Institute, and they received a bounty of $31,000.
