Google Chrome Updated With Patch for Nasty Zero-Day Vulnerability Exploited by Attackers

Google says that it is aware that an exploit for the high-severity flaw exists in the wild

Written by David Delima | Updated: 11 May 2024 19:58 IST

Google Chrome Updated With Patch for Nasty Zero-Day Vulnerability Exploited by Attackers

Photo Credit: Unsplash/ Firmbee

Chrome users can enable automatic updates on Windows and macOS to stay safe

Highlights

Google Chrome for desktop computers has been updated with a security fix
The latest stable Chrome update fixes a high-severity security flaw
Chrome users should ensure that they're running the latest Chrome version

Google Chrome has been updated with fixes for a zero-day security flaw that was being actively exploited in the wild, according to the search giant. The vulnerability affects a component in Chrome that renders web content on a user's screen, allowing attackers to take advantage of a user's computer when a user visits a maliciously crafted website. Chrome users on all desktop computer platforms will need to ensure that their browser is updated to the latest version in order to ensure that they are safe.

According to details shared by the company in a blog post, the latest stable versions of Google Chrome for Windows, macOS, and Linux includes a fix for a security flaw with a 'High' severity rating. Google says it has patched a use after free vulnerability (CVE-2024-4671) is related to the Visuals component on Chrome, reported by an anonymous external researcher.

A use after free vulnerability would allow an attacker to access out-of-bounds-memory when a user visits a malicious crafted webpage, by taking advantage of the vulnerability. This would allow them to access data remotely, or gain access to and control the system.

Samsung Wins Patent for a Tri-Fold Smartphone With Specialised Barrier Layer for Improved Durability

Notably, Google's blog post also states that the company "is aware that an exploit for CVE-2024-4671 exists in the wild." As a result, it is imperative that users make sure that they are running on the latest stable version of Chrome — version 124.0.6367.201/.202 for Windows and macOS, and version 124.0.6367.201 for Linux computers.

On Windows, users can click on the three-dot menu at the top right corner of the screen, then click on Help > About Google Chrome, then click on Update Google Chrome — if this button isn't visible, that means the latest version of Chrome has already been installed. macOS users can also select the Automatically update Chrome for all users option in the same menu to get the latest updates, while Linux users will need to get automatic updates via their package manager.

Is the Samsung Galaxy Z Flip 5 the best foldable phone you can buy in India right now? We discuss the company's new clamshell-style foldable handset on the latest episode of Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Further reading: Google Chrome, Chrome security flaw, Google Chrome update

David Delima

Email David Delima

As a writer on technology with Gadgets 360, David Delima is interested in open-source technology, cybersecurity, consumer privacy, and loves to read and write about how the Internet works. David can be contacted via email at DavidD@ndtv.com, on Twitter at @DxDavey, and Mastodon at mstdn.social/@delima. More