![Chrome zero-day vulnerability Chrome zero-day vulnerability](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbF8wx_xuLZ51MTHpCOGdzhN7uoQqeUv9WnoyH1_pZ-84rV1BgjxUr1NQfMiogwJkoUXmvki27jHE-xRC-GwTpFEPuxTASdjeQIpdevA628w8I8Ufh-AHtkuK9jXo7CYdSxpqCjW8pFMP71VTdcutUPOQOZeexKjkzZi5vhypW952FbL8uw07mq-NMQF77/s728-rw-e365/chrome.png)
Google has rolled out fixes to address nine security issues in its Chrome browser, including a new zero-day vulnerability that has been widely exploited.
CVE identifier assigned CVE-2024-4947, the vulnerability is related to a type confusion bug in the V8 JavaScript and WebAssembly engines. Kaspersky researchers Vasily Berdnikov and Boris Larin reported the news on May 13, 2024.
Type confusion vulnerabilities occur when a program attempts to access resources of incompatible types. It can have serious impact as it allows threat actors to perform out-of-bounds memory access, cause crashes, and execute arbitrary code.
![Internet security](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuUUskkMH9dUT3LF77_Q_irGuaE4LGjp-Am2Ls_UzGJ5EBnZHfuFiSvKs4OPE5KmfedBHcuZZVHS4Bh48UJx8brpwtg6Vr2Gepbaw-lGMIm9HjUhyphenhyphen2W5DVm5-ymwPS691Ie32TrCqFIv6SxNRA-jOKCKZrOB5dV7BfL0zVAhOO0neNkP9yv-XePBU1hN_0/s728-e365/wing-d.png)
This development marks the third zero-day vulnerability Google has patched in a week, following CVE-2024-4671 and CVE-2024-4761.
As is usual, no further details about the attack are available and have been withheld to prevent further exploitation. “Google is aware of the vulnerability CVE-2024-4947,” the company said.
Since the beginning of this year, Google has addressed a total of 7 zero-day vulnerabilities in Chrome through CVE-2024-4947 –
Users are recommended to upgrade to Chrome version 125.0.6422.60/.61 on Windows and macOS and to Chrome version 125.0.6422.60 on Linux to mitigate potential threats.
Users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi are also advised to apply these fixes when they become available.
3 Comments
Pingback: Google fixes another actively exploited Chrome zero-day vulnerability – Tech Empire Solutions
Pingback: Google fixes another actively exploited Chrome zero-day vulnerability – Paxton Willson
Pingback: Google fixes another actively exploited Chrome zero-day vulnerability – Mary Ashley