HighZero-Day
Google patches eighth Chrome zero-day exploited in attacks this year
BleepingComputer·Source published ·1 min read
What happened?
Google has released emergency security updates to patch a new Chrome vulnerability exploited in zero-day attacks, the eighth such flaw since the start of the year. [...]
Key details
- Google released emergency Chrome updates for an actively exploited zero-day vulnerability.
- The flaw is a use-after-free weakness in Chrome's XML component.
- Attackers can manipulate freed memory to execute malicious code.
- Fixed versions are rolling out for Windows, macOS, and Linux desktops.
Affected
- Google Chrome Stable Desktop channel before version 157.0.8103.50 on Windows and Linux.
Fixes and mitigations
- Allow Chrome to automatically install updates after next launch.
Summarised by SecOraLens from BleepingComputer. Always read the original source before acting. How SecOraLens verifies advisories.