Google Releases Security Update for Actively Exploited Chrome Vulnerability

• bunee
• June 6, 2023
• No Comments

Google Releases Security Update to Patch Actively Exploited Chrome Vulnerability

On June 7, 2023, Google announced the release of security updates to fix a type confusion bug in the V8 JavaScript engine. This bug has been tracked as CVE-2023-3079 and it is claimed to be a high-severity security flaw in the Chrome web browser. The search giant revealed that this vulnerability has been actively exploited in the wild.

The issue was first reported to Google by Clement Lecigne of Google’s Threat Analysis Group on June 1, 2023. Based on the severity of the bug and the fact that it is being exploited, Google moved quickly to fix the issue by releasing a patch that effectively mitigates the vulnerability.

Type confusion bugs are often serious security vulnerabilities that can enable a malicious attacker to execute arbitrary code remotely on a targeted computer system. This type of attack is widely used by hackers to take control of systems and install malware.

The V8 JavaScript engine is used by Chrome to execute JavaScript code on websites. The bug could allow an attacker to inject malicious code into an otherwise safe website. The attacker could then lure unsuspecting users to visit this website and exploit the vulnerability to take control of their computers.

Google advised users to update their browser as soon as possible to the latest version, which includes the security patch. Users can check if they are running the latest version by going to the Settings tab and clicking on About Google Chrome.

In the past, Google has been lauded for its quick response to security vulnerabilities in Chrome. The company’s transparency in disclosing vulnerabilities and releasing patches in a timely manner has been critical in protecting the millions of users of the popular web browser. The company’s latest patch for CVE-2023-3079 is another example of its commitment to security and privacy.Original Article: https://thehackernews.com/2023/06/zero-day-alert-google-issues-patch-for.html