Google Chrome updated with a patch to remove a nasty zero-day vulnerability exploited by attackers

According to the search giant, Google Chrome has been updated with fixes for a zero-day security vulnerability that has been actively exploited in the wild. The vulnerability affects a component of the Chrome browser that displays web content on a user’s screen, allowing attackers to exploit a user’s computer when the user visits a maliciously crafted website. Chrome users on all desktop platforms will need to update their browser to the latest version to ensure they are protected.

According to details provided by the company, blog post, the latest stable versions of Google Chrome for Windows, macOS, and Linux include a patch for the vulnerability with a severity rating of High. Google says it has patched the file utilize after free gap (CVE-2024-4671) is related to the Visuals component in Chrome and reported by an anonymous third-party researcher.

A post-free exploit would allow an attacker to access out-of-bounds memory when a user visits a maliciously crafted web page by exploiting this vulnerability. This would allow them to access data remotely or gain access to and control the system.

Notably, Google’s blog post also states that the company is “aware of the CVE-2024-4671 security vulnerability.” As a result, it is imperative that users ensure they are running the latest stable version of Chrome – version 124.0.6367.201/.202 for Windows and macOS and version 124.0.6367.201 for Linux computers.

On Windows, users can click the three-dot menu in the upper right corner of the screen and then click next Support > About google chromeand then click Update Google Chrome – If this button is not apparent, it means that the latest version of Chrome is already installed. macOS users can also select the option Automatically update Chrome for all users option in the same menu to get the latest updates, while Linux users will have to get automatic updates via the package manager.