Google releases security update for Chrome to fix zero-day bug

In response to the first zero-day vulnerability exploited in attacks since the start of the year, Google has released an emergency Chrome security update.

Published By: Shweta Ganjoo | Published: Apr 17, 2023, 11:45 AM (IST)

Highlights

  • Google has released a security update for Chrome.
  • This update fixes a zero-day bug in vulnerability.
  • This update is available for Windows, Mac, and Linux computers.

In response to the first zero-day vulnerability exploited in attacks since the start of the year, Google has released an emergency Chrome security update. Also Read: How to avoid UPI fraud by identifying fake requests and common scam tricks

"Google is aware that an exploit for CVE-2023-2033 exists in the wild," Google said in a security advisory. Also Read: Google Pixel 11 Pro leaks: Tensor G6 chip, 16GB RAM, 50MP triple camera, 5000mAh battery

The new version is currently being rolled out to users in the Stable Desktop channel, and it will eventually reach the full user base.

Chrome users will need to update to the new version as soon as possible since it fixes the CVE-2023-2033 vulnerability on Windows, Mac, and Linux computers.

Users can check for updates by going to the Chrome menu > Help > Google Chrome.

According to BleepingComputer, the high-severity zero-day vulnerability (CVE-2023-2033) is due to a high-severity type confusion weakness in the Chrome V8 JavaScript engine.

Clement Lecigne of Google's Threat Analysis Group (TAG), whose major mission is to protect Google customers from state-sponsored attacks, reported the bug.

Moreover, the report mentioned that in spite of Google claiming that its knowledge of CVE-2023-2033 zero-day exploits has been used in attacks, the company has yet to provide further details.

"Access to bug details and links may be kept restricted until a majority of users are updated with a fix," Google was quoted as saying.

"We will also retain restrictions if the bug exists in a third-party library that other projects similarly depend on, but haven't yet fixed," it added.

-- IANS

Get latest Tech and Auto news from Techlusive on our WhatsApp Channel, Facebook, X (Twitter), Instagram and YouTube.