Security News > 2021 > March > Google Warns Mac, Windows Users of Chrome Zero-Day Flaw

Google is hurrying out a fix for a vulnerability in its Chrome browser that's under active attack - its third zero-day flaw so far this year.
Another high-severity flaw is a heap-buffer overflow error that stems from Chrome tab groups.
The use-after-free flaw is the third zero-day flaw to plague Google's Chrome browser in the past three months - and the second this month alone.
Earlier in March, Google said it fixed a high-severity zero-day vulnerability in its Chrome browser, which stems from the audio component of the browser.
In February, Google warned of a zero-day vulnerability in its V8 open-source web engine that's being actively exploited by attackers; a patch for which was issued in version 88 of Google's Chrome browser.
Google Chrome users can go to chrome://settings/help by clicking Settings > About Chrome.
News URL
https://threatpost.com/google-mac-windows-chrome-zero-day/164759/
Related news
- New details reveal how hackers hijacked 35 Google Chrome extensions (source)
- Google Chrome is making it easier to share specific parts of long PDFs (source)
- Microsoft fixes actively exploited Windows Hyper-V zero-day flaws (source)
- Fake Homebrew Google ads target Mac users with malware (source)
- Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More (source)
- Google to kill Chrome Sync on older Chrome browser versions (source)
- SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac, iPad Silicon (source)
- Google fixes Android kernel zero-day exploited in attacks (source)
- Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking (source)
- Google Chrome's AI-powered security feature rolls out to everyone (source)