A serious zero-day vulnerability has been identified in Google Chrome, which is actively exploited by attackers. The search giant has released an emergency update to fix the vulnerability in desktop versions of the popular internet browser.
The vulnerability, identified as CVE-2023-3079, is the third zero-day vulnerability detected in Chrome this year. The issue has to do with Type Confusion in V8, an open source javascript engine developed by Google for the Chrome browser.
The high severity vulnerability allows attackers to exploit stack corruption via a specially crafted HTML page. Google did not provide technical details about the vulnerability in order not to put billions of Chrome users around the world at risk.
What can cause species confusion?
Type confusion vulnerabilities pose a significant risk as they exploit weaknesses in memory object handling, allowing arbitrary code to run on targeted machines. Therefore, it is necessary to install browser updates without wasting time to reduce potential risks.
In response to this serious vulnerability, Google has released patches for Chrome on all platforms. Users need to update their browser to version 114.0.5735.106 for macOS and Linux, and 114.0.5735.110 for Windows. You can use the Help > About Google Chrome menu for this.
47392
