If you’re a Chrome user on Windows, Mac, or Linux, you should update as soon as possible. One of these security fixes is for a zero-day about which Google says it’s aware that an exploit for this vulnerability exists in the wild. You can also download it manually by going to the “About Chrome” tab to automatically receive the update or visit Google's support page on how to download the patches.Google has released an update which includes two security fixes.

'While we get the security fix rolled out, it is worth highlighting that Microsoft Edge's enhanced security mode feature helps mitigate this vulnerability,' it added.Īs for Chrome, the program will nudge you to patch by showing an “update” button in the upper-right corner of the browser when the new version becomes available. Microsoft also says it's aware of the vulnerability and working on a patch for Edge. Google has rolled out the patches through Chrome version 1.106 for Macs and Linux, and then version 1.110 for Windows.

Two others were reported in April, including another type confusion flaw with the V8 engine. The flaw is the third zero-day exploit Google has uncovered this year targeting Chrome users. This suggests a hacker could use some JavaScript code, perhaps embedded in a website, to trigger CVE-2023-3079 to execute a malicious function.

But Clément Lecigne, a researcher with the company’s Threat Analysis Group, discovered the threat on June 1, which resulted in Google rolling out an emergency patch.įor now, Google has only said CVE-2023-3079 pertains to a “type confusion” vulnerability in the V8 JavaScript engine for Chrome and other Chromium-based browsers, which would include Microsoft’s Edge and Brave. The problem means the V8 engine contains a programming bug where it’ll neglect to verify a resource, creating a way to access other processes in the program that should normally be restricted. So far, Google hasn’t revealed much about the flaw.

Download Google Chrome 114.0.5735.110