Security News > 2023 > November > Uh-oh, update Google Chrome – exploit already out there for one of these 6 security holes

Google has rolled out six Chrome security fixes including one emergency patch for a bug for which exploit code is already out there.

Google doesn't provide a whole lot of detail about the bug, nor any details about who may be exploiting it and to what nefarious end.

Networking kit vendor Zyxel issued patches for six vulnerabilities, including three critical 9.8-rated bugs that could allow an unauthenticated attacker to execute some operating system commands on network-attached storage products.

In addition to the CVE with exploit code in the wild, the latest Chrome release addresses five other high-severity flaws.

Google pushed patches for three use-after-free flaws: one in Mojo tracked as CVE-2023-6347, and one in WebAUdio tracked as CVE-2023-6346, and one in libavif tracked as CVE-2023-6351.

Google isn't aware of any in-the-wild exploits for these issues.

News URL

https://go.theregister.com/feed/www.theregister.com/2023/11/30/chrome_zeroday/