Google Chrome updated with fix for nasty zero-day vulnerability exploited by attackers

Google Chrome has been updated with fixes for a zero-day security flaw that was being actively exploited in the wild, according to the search giant. The vulnerability affects a component of Chrome that displays web content on a user’s screen, allowing attackers to take advantage of a user’s computer when they visit a maliciously crafted website. Chrome users on all desktop platforms will need to make sure their browser is updated to the latest version to ensure their security.

According to details shared by the company in a blog post, the latest stable versions of Google Chrome for Windows, macOS, and Linux include a fix for a security flaw with a “high” severity rating. Google says it has fixed a use-after-free vulnerability (CVE-2024-4671) related to the visual component on Chrome, reported by an anonymous external researcher.

A free use-after-use vulnerability would allow an attacker to access out-of-bounds memory when a user visits a maliciously crafted web page, leveraging the vulnerability. This would allow them to access data remotely or access and control the system.

Notably, Google’s blog also states that the company “is aware that an exploit for CVE-2024-4671 exists in the wild.” Therefore, it is imperative that users ensure that they are using the latest stable version of Chrome: version 124.0.6367.201/.202 for Windows and macOS and version 124.0.6367.201 for Linux computers.

On Windows, users can click the three-dot menu in the upper right corner of the screen and then click Help > About Google Chromethen click Update Google Chrome — if this button is not visible, it means that the latest version of Chrome has already been installed. macOS users can also select the Automatically update Chrome for all users in the same menu to get the latest updates, while Linux users will need to get automatic updates through their package manager.