Security News > 2021 > March > Google Warns Mac, Windows Users of Chrome Zero-Day Flaw
Google is hurrying out a fix for a vulnerability in its Chrome browser that's under active attack - its third zero-day flaw so far this year.
Another high-severity flaw is a heap-buffer overflow error that stems from Chrome tab groups.
The use-after-free flaw is the third zero-day flaw to plague Google's Chrome browser in the past three months - and the second this month alone.
Earlier in March, Google said it fixed a high-severity zero-day vulnerability in its Chrome browser, which stems from the audio component of the browser.
In February, Google warned of a zero-day vulnerability in its V8 open-source web engine that's being actively exploited by attackers; a patch for which was issued in version 88 of Google's Chrome browser.
Google Chrome users can go to chrome://settings/help by clicking Settings > About Chrome.
News URL
https://threatpost.com/google-mac-windows-chrome-zero-day/164759/
Related news
- Lazarus hackers used fake DeFi game to exploit Google Chrome zero-day (source)
- North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware (source)
- Google: 70% of exploited flaws disclosed in 2023 were zero-days (source)
- Google to let businesses create curated Chrome Web Stores for extensions (source)
- How to enable Safe Browsing in Google Chrome on Android (source)
- Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices (source)
- New tool bypasses Google Chrome’s new cookie encryption system (source)
- New Windows Themes zero-day gets free, unofficial patches (source)
- Windows Themes zero-day bug exposes users to NTLM credential theft (source)
- Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine (source)