Google on Monday released security updates to patch a high-severity vulnerability in its Chrome web browser. The vulnerability, known as CVE-2023-3079, is a type confusion bug in the V8 JavaScript engine. It has been reported that this vulnerability is being actively exploited in the wild.
The update is available for Windows, macOS, and Linux. Users are advised to upgrade to version 114.0.5735.110 for Windows and 114.0.5735.106 for macOS and Linux. Users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi are also advised to apply the fixes as and when they become available.
By infosecbulletin
/ Thursday , February 27 2025
Cisco has warned of a critical vulnerability, CVE-2025-20111, in several Nexus switch models. This flaw could let attackers remotely crash...
Read More
By infosecbulletin
/ Thursday , February 27 2025
GitLab has released a security advisory, urging all self-managed installations to upgrade to versions 17.9.1, 17.8.4, or 17.7.6 due to...
Read More
By infosecbulletin
/ Thursday , February 27 2025
A China-linked botnet is targeting Microsoft 365 accounts with widespread password spraying attacks, according to a report by SecurityScorecard. A...
Read More
By infosecbulletin
/ Wednesday , February 26 2025
A breach notification site has added millions of new passwords and email addresses obtained from infostealer malware. Troy Hunt, founder of...
Read More
By infosecbulletin
/ Wednesday , February 26 2025
Cybersecurity researchers have discovered a campaign exploiting a remote command execution vulnerability, CVE-2023-20118, in Cisco Small Business Routers. This vulnerability...
Read More
By infosecbulletin
/ Wednesday , February 26 2025
CISA has added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, urging organizations to quickly patch their systems to...
Read More
By infosecbulletin
/ Tuesday , February 25 2025
A new cyber campaign called GitVenom poses a serious risk to developers. Security researchers found over 200 fake GitHub repositories...
Read More
By infosecbulletin
/ Tuesday , February 25 2025
Residents of Dubai can now easily renew their visas with the new AI-powered digital platform launched by the General Directorate...
Read More
By infosecbulletin
/ Tuesday , February 25 2025
CVE-2024-20953 is a vulnerability in Oracle Agile PLM, a product lifecycle management tool. With a CVSS score of 8.8, it...
Read More
By infosecbulletin
/ Monday , February 24 2025
Days after the biggest crypto hack ever, another platform has experienced a major exploit. Infini Earn, a decentralized stablecoin bank,...
Read More
ALSO READ:
CTFBD – “MAZE IN ANTARJAL” STARTS 16 JUNE, REGISTRTION OPEN
The vulnerability was discovered by Clément Lecigne of Google’s Threat Analysis Group (TAG). It is a type confusion bug, which means that the attacker can cause the browser to treat data of one type as if it were another type. This can be used to exploit heap corruption, which can allow the attacker to take control of the browser.
Google has not disclosed any details about the attacks that are exploiting this vulnerability. However, the fact that Google is aware that an exploit exists in the wild means that it is important to update Chrome as soon as possible.
By updating Chrome, users can help to protect themselves from this vulnerability and from other potential attacks. It is important to keep all software up to date to help protect against security vulnerabilities.