<\/div>\n

Since the start of the year, Google released an update to fix the fifth actively exploited zero-day vulnerability in the Chrome browser.<\/h2>\n\n\n\n

Google this week released security updates to address a zero-day flaw, tracked as CVE-2024-4671, in Chrome browser. The vulnerability is the fifth zero-day flaw in the Google browser that is exploited in the wild since the start of the year.<\/p>\n\n\n\n

The vulnerability is a use-after-free issue that resides in the Visuals component. The flaw was reported by an anonymous researcher on May 7, 2024.<\/p>\n\n\n\n

“Google is aware that an exploit for CVE-2024-4671 exists in the wild.” reads the advisory<\/a> published by Google. As usual, the IT giant has not revealed details about the attacks exploiting this vulnerability. <\/p>\n\n\n\n

The company addressed the vulnerability with the release of 124.0.6367.201\/.202 for Mac\/Windows and 124.0.6367.201 for Linux, with the updates rolling out over the coming days\/weeks.<\/p>\n\n\n\n

Below is the list of actively exploited zero-day in the Chrome browser that have been fixed this year:<\/p>\n\n\n\n

\n
• CVE-2024-0519<\/a><\/strong>: an out of bounds memory access in the Chrome JavaScript engine. (January 2024)<\/li>\n\n\n\n
• CVE-2024-2887<\/a><\/strong>:  a type confusion issue that resides in WebAssembly. Manfred Paul demonstrated<\/a> the vulnerability during the Pwn2Own 2024. (March 2024)<\/gwmw><\/li>\n\n\n\n
• CVE-2024-2886<\/a><\/strong>: a use after free issue that resides in the WebCodecs. The flaw was demonstrated by Seunghyun Lee (@0x10n<\/a>) of KAIST Hacking Lab during the Pwn2Own 2024. (March 2024)<\/li>\n\n\n\n
• CVE-2024-3159<\/a><\/strong>: an out-of-bounds memory access in V8 JavaScript engine. The flaw was demonstrated by Edouard Bochin (@le_douds) and Tao Yan (@Ga1ois) of Palo Alto Networks during the Pwn2Own 2024 on March 22, 2024. (March 2024)<\/gwmw><\/gwmw><\/li>\n<\/ul>\n\n\n\n

  Follow me on Twitter: @securityaffairs<\/strong><\/a> and Facebook<\/strong><\/a> and Mastodon<\/a><\/p>\n\n\n\n

  Pierluigi Paganini<\/strong><\/a><\/p>\n\n\n\n

  (<\/strong>SecurityAffairs<\/strong><\/a> \u2013<\/strong> hacking, Google)<\/strong><\/p>\n\n\n\n

  <\/gwmw><\/p>\n","protected":false},"excerpt":{"rendered":"

  Since the start of the year, Google released an update to fix the fifth actively exploited zero-day vulnerability in the Chrome browser. Google this week released security updates to address a zero-day flaw, tracked as CVE-2024-4671, in Chrome browser. The vulnerability is the fifth zero-day flaw in the Google browser that is exploited in the […]<\/p>\n","protected":false},"author":1,"featured_media":45647,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3323,5,55],"tags":[2037,4112,9508,9506,10918,687,841,1533,528],"class_list":["post-162976","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-breaking-news","category-hacking","category-security","tag-chrome","tag-hacking","tag-hacking-news","tag-information-security-news","tag-it-information-security","tag-pierluigi-paganini","tag-security-affairs","tag-security-news","tag-zero-day"],"yoast_head":"\n