Security News > 2021 > July > Update Your Chrome Browser to Patch New Zero‑Day Bug Exploited in the Wild

Update Your Chrome Browser to Patch New Zero‑Day Bug Exploited in the Wild
2021-07-15 22:08

Google has pushed out a new security update to Chrome browser for Windows, Mac, and Linux with multiple fixes, including a zero-day that it says is being exploited in the wild.

The latest patch resolves a total of eight issues, one of which concerns a type confusion issue in its V8 open-source and JavaScript engine.

The search giant credited an anonymous researcher for reporting the flaw on July 12.

As is usually the case with actively exploited flaws, the company issued a terse statement acknowledging that "An exploit for CVE-2021-30563 exists in the wild" while refraining from sharing full details about the underlying vulnerability used in the attacks due to its serious nature and the possibility that doing so could lead to further abuse.

CVE-2021-30563 also marks the ninth zero-day addressed by Google to combat real-world attacks against Chrome users since the start of the year -.

Chrome users are advised to update to the latest version by heading to Settings > Help > 'About Google Chrome' to mitigate the risk associated with the flaw.


News URL

http://feedproxy.google.com/~r/TheHackersNews/~3/j6BEv2m0Dn8/update-your-chrome-browser-to-patch-new.html

Related Vulnerability

DATE CVE VULNERABILITY TITLE RISK
2021-08-03 CVE-2021-30563 Type Confusion vulnerability in Google Chrome
Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
google CWE-843
6.8