October 3, 2023

Google has released security updates to address a high severity vulnerability, tracked as CVE-2023-3079, in its Chrome web browser. The vulnerability is a type confusion issue that resides in the V8 JavaScript engine.

Google is aware that the vulnerability is being actively exploited in the wild. The vulnerability was discovered by Clement Lecigne of Google’s Threat Analysis Group, which is the team at Google that monitors the activity of nation-state actors.

The vulnerability has reported on June 1, 2023, it is likely that the flaw was exploited as part of an exploit used by a state-sponsored APT group.

Advertisements

Google did not disclose details of the attacks exploiting the vulnerability CVE-2023-3079. It’s a thrid actively exploited Zeroday in Chrome addresses by Google in 2023

The stable and extended stable channels have been updated to 114.0.5735.106 for Mac and Linux and 114.0.5735.110 for Windows, which will roll out over the coming days/weeks.

Leave a Reply

%d bloggers like this: