Google releases emergency update to fix zero-day Chrome vulnerability

In response to the primary zero-day vulnerability exploited in assaults because the begin of the 12 months, Google has launched an emergency Chrome safety replace.

“Google is aware that an exploit for CVE-2023-2033 exists in the wild,” Google mentioned in a safety advisory.

The new model is at present being rolled out to customers within the Stable Desktop channel, and it’ll ultimately attain the total consumer base.

Chrome customers might want to replace to the brand new model as quickly as potential because it fixes the CVE-2023-2033 vulnerability on Windows, Mac, and Linux computer systems.

Users can verify for updates by going to the Chrome menu > Help > Google Chrome.

According to BleepingComputer, the high-severity zero-day vulnerability (CVE-2023-2033) is because of a high-severity kind confusion weak point within the Chrome V8 JavaScript engine.

Clement Lecigne of Google’s Threat Analysis Group (TAG), whose main mission is to guard Google clients from state-sponsored assaults, reported the bug.Moreover, the report talked about that regardless of Google claiming that its information of CVE-2023-2033 zero-day exploits has been utilized in assaults, the corporate has but to offer additional particulars.

“Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Google was quoted as saying.

“We will also retain restrictions if the bug exists in a third-party library that other projects similarly depend on, but haven’t yet fixed,” it added.

Stay on prime of know-how and startup news that issues. Subscribe to our day by day publication for the most recent and must-read tech news, delivered straight to your inbox.