Security News > 2023 > June > Exploited zero-day patched in Chrome (CVE-2023-3079)
Google has fixed a high-severity vulnerability in the Chrome browser that is being exploited by attackers.
"Google is aware that an exploit for CVE-2023-3079 exists in the wild," the Chrome team says.
To address this critical issue, users are advised to upgrade their Google Chrome browser to the latest version.
These latest versions also include fixes for bugs unearthed by Google via internal audits, fuzzing and through other initiatives.
This marks the third time in the current year that Google Chrome has experienced a zero-day vulnerability exploited in the wild.
Google has recently considerably augmented the reward amount for security bug reports that include a functional full chain exploit of Chrome.
News URL
https://www.helpnetsecurity.com/2023/06/07/cve-2023-3079/
Related news
- Google fixes Chrome zero-day exploited in espionage campaign (source)
- Google fixes exploited Chrome sandbox bypass zero-day (CVE-2025-2783) (source)
- Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks (source)
- Mozilla Patches Critical Firefox Bug Similar to Chrome’s Recent Zero-Day Vulnerability (source)
- After Chrome patches zero-day used to target Russians, Firefox splats similar bug (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-05 | CVE-2023-3079 | Type Confusion vulnerability in multiple products Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |