In case you are a Google Chrome consumer, drop all the pieces and replace your browser straight away. Google has issued a safety replace for the Chrome net browser to handle the third zero-day vulnerability exploited by hackers this 12 months. Meaning with out the replace, the Chrome browser put in in your telephone could also be susceptible to hacking.
“Google is conscious that an exploit for CVE-2023-3079 exists within the wild,” Google mentioned in a weblog submit. The corporate has not launched particulars in regards to the exploit and the way it was utilized in assaults, as a substitute specializing in the severity and sort of flaw.
“Entry to bug particulars and hyperlinks could also be stored restricted till a majority of customers are up to date with a repair. We can even retain restrictions if the bug exists in a third-party library that different tasks equally rely on, however haven’t but fastened,” the corporate mentioned.
In response to BleepingComputer, CVE-2023-3079 is a high-severity vulnerability found on June 1, 2023, by Google researcher Clement Lecigne. It’s a kind confusion in V8, Chrome’s JavaScript engine tasked with executing code throughout the browser.
Sort confusion bugs happen when an object’s kind is misinterpreted by the engine throughout runtime, probably resulting in malicious reminiscence manipulation and arbitrary code execution.
The primary zero-day vulnerability that Google patched in Chrome this 12 months was CVE-2023-2033, which can also be a kind confusion bug within the V8 JavaScript engine.
In March, Google safety groups found 18 zero-day vulnerabilities in Samsung Exynos chips utilized in a number of high Android smartphones and wearables that will put these units in danger. Google’s Undertaking Zero head Tim Willis mentioned in a weblog submit that the 4 most extreme of those vulnerabilities “allowed for Web-to-baseband distant code execution.”
— Written with inputs from IANS
