InfoSecBulletin Cybersecurity for mankind
Google on Monday released security updates to patch a high-severity vulnerability in its Chrome web browser. The vulnerability, known as CVE-2023-3079, is a type confusion bug in the V8 JavaScript engine. It has been reported that this vulnerability is being actively exploited in the wild.
The update is available for Windows, macOS, and Linux. Users are advised to upgrade to version 114.0.5735.110 for Windows and 114.0.5735.106 for macOS and Linux. Users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi are also advised to apply the fixes as and when they become available.
Russia detects first SuperCard malware attacks via NFC
Income Property Investments exposes 170,000+ Individuals record
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
SoftBank: Over 137,000 personal info leaked
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
ALSO READ:
The vulnerability was discovered by Clément Lecigne of Google’s Threat Analysis Group (TAG). It is a type confusion bug, which means that the attacker can cause the browser to treat data of one type as if it were another type. This can be used to exploit heap corruption, which can allow the attacker to take control of the browser.
Google has not disclosed any details about the attacks that are exploiting this vulnerability. However, the fact that Google is aware that an exploit exists in the wild means that it is important to update Chrome as soon as possible.
By updating Chrome, users can help to protect themselves from this vulnerability and from other potential attacks. It is important to keep all software up to date to help protect against security vulnerabilities.
