[ad_1]
Google has rolled out fixes for 5 safety vulnerabilities in its Chrome internet browser, together with one which it says is being exploited within the wild, making it the seventeenth such weak point to be disclosed because the begin of the yr.
Tracked as CVE-2021-4102, the flaw pertains to a use-after-free bug within the V8 JavaScript and WebAssembly engine, which might have extreme penalties starting from corruption of legitimate knowledge to the execution of arbitrary code. An nameless researcher has been credited with discovering and reporting the flaw.
Because it stands, it isn’t recognized how the weak point is being abused in real-world assaults, however the web big issued a terse assertion that stated, “it is conscious of studies that an exploit for CVE-2021-4102 exists within the wild.” That is performed so in an try to make sure that a majority of customers are up to date with a repair and stop additional exploitation by different menace actors.
CVE-2021-4102 is the second use-after-free vulnerability in V8 the corporate has remediated in lower than three months following studies of lively exploitation, with the earlier vulnerability CVE-2021-37975, additionally reported by an nameless researcher, plugged in an replace it shipped on September 30. It isn’t instantly clear if the 2 flaws bear any relation to 1 one other.
With this newest replace, Google has addressed a report 17 zero-days in Chrome this yr alone —
Chrome customers are really helpful to replace to the newest model (96.0.4664.110) for Home windows, Mac, and Linux by heading to Settings > Assist > ‘About Google Chrome’ to mitigate any potential danger of lively exploitation.
[ad_2]
