Google Chrome updated with patch for nasty zero-day vulnerability exploited by attackers

Google Chrome has been updated with fixes for a zero-day security flaw that was actively exploited in the wild, according to the search giant. The vulnerability affects a component in Chrome that renders web content on a user’s screen, allowing attackers to take advantage of a user’s computer when a user visits a maliciously crafted website. Chrome users on all desktop platforms will need to make sure their browser is updated to the latest version to ensure they are safe.

According to details shared by the company in a blog post, the latest stable versions of Google Chrome for Windows, macOS, and Linux include a patch for a “high” severity security flaw. Google says it fixed a use after free vulnerability (CVE-2024-4671) is related to the Visuals component of Chrome, reported by an anonymous external researcher.

The “use-after-free” vulnerability would allow an attacker to access out-of-bounds memory when a user visits a maliciously crafted web page that exploits the vulnerability. This will allow them to remotely access data or gain access and control of the system.

Notably, Google’s blog post also states that the company “is aware that an exploit for CVE-2024-4671 exists in the wild.” As a result, it is imperative that users ensure they are running the latest stable version of Chrome — version 124.0.6367.201/.202 for Windows and macOS and version 124.0.6367.201 for Linux computers.

In Windows, users can click the three-dot menu in the upper-right corner of the screen, then click Help > About Google Chromethen click on Update Google Chrome — if this button is not visible, it means that the latest version of Chrome is already installed. macOS users can also choose Automatically update Chrome for all users option in the same menu to get the latest updates, while Linux users will have to get automatic updates through their package manager.