InfoSecBulletin Cybersecurity for mankind
Google on Monday released security updates to patch a high-severity vulnerability in its Chrome web browser. The vulnerability, known as CVE-2023-3079, is a type confusion bug in the V8 JavaScript engine. It has been reported that this vulnerability is being actively exploited in the wild.
The update is available for Windows, macOS, and Linux. Users are advised to upgrade to version 114.0.5735.110 for Windows and 114.0.5735.106 for macOS and Linux. Users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi are also advised to apply the fixes as and when they become available.
ALSO READ:
The vulnerability was discovered by Clément Lecigne of Google’s Threat Analysis Group (TAG). It is a type confusion bug, which means that the attacker can cause the browser to treat data of one type as if it were another type. This can be used to exploit heap corruption, which can allow the attacker to take control of the browser.
Google has not disclosed any details about the attacks that are exploiting this vulnerability. However, the fact that Google is aware that an exploit exists in the wild means that it is important to update Chrome as soon as possible.
By updating Chrome, users can help to protect themselves from this vulnerability and from other potential attacks. It is important to keep all software up to date to help protect against security vulnerabilities.
