Security News > 2021 > June > Update‌ ‌Your Chrome Browser to Patch Yet Another 0-Day Exploit‌ed ‌in‌-the‌-Wild

Google has rolled out yet another update to Chrome browser for Windows, Mac, and Linux to fix four security vulnerabilities, including one zero-day flaw that's being exploited in the wild.

Tracked as CVE-2021-30554, the high severity flaw concerns a use after free vulnerability in WebGL, a JavaScript API for rendering interactive 2D and 3D graphics within the browser.

The issue was reported to Google anonymously on June 15, Chrome technical program manager Srinivas Sista noted, adding the company is "Aware that an exploit for CVE-2021-30554 exists in the wild."

While it's usually the norm to limit details of the vulnerability until a majority of users are updated with the fix, the development comes less than 10 days after Google addressed another zero-day vulnerability exploited in active attacks.

"I'm happy we are getting better at detecting these exploits and the great partnerships we have to get the vulnerabilities patched, but I remain concerned about how many are being discovered on an ongoing basis and the role of commercial providers," tweeted Shane Huntley, Director of Google's Threat Analysis Group, on June 8.

Chrome users are recommended to update to the latest version by heading to Settings > Help > 'About Google Chrome' to mitigate the risk associated with the flaw.

News URL

http://feedproxy.google.com/~r/TheHackersNews/~3/6YKGzalLHAY/update-your-chrome-browser-to-patch-yet.html