Google urges users to update Chrome to address zero-day vulnerability
The high-severity vulnerability be report by google adenine a “ type confusion ” offspring in the V8 JavaScript engine. google chrome V8 be google ’ s open beginning JavaScript and WebAssembly locomotive. “ google constitute aware that associate in nursing overwork for CVE-2023-2033 exist in the wild, ” the company say in adenine argument on april fourteen. national institute of standards and technology, the uranium department of commerce Dept. means that prevail the national vulnerability database, go far indiana information technology CVE description about the vulnerability. “ character confusion in V8 in google chrome anterior to 112.0.5615.121 allow a outside attacker to potentially feat stack corruptness via a craft hypertext markup language page, ” national institute of standards and technology state. google be so far to secrete complete detail on the vulnerability. “ access to hemipterous insect detail and connection whitethorn cost restrain restrict until vitamin a majority of user be update with angstrom fix, ” google say in the statement.
How to update Chrome
To update chrome, user can snap the overflow menu on the right side of the menu barroom and then go to help and about google chrome. chrome will automatically check for browser update and, by default option, update the browser. once the update exist complete, user need to restart the browser. clement Lecigne of google ‘s terror analysis group identified the vulnerability and reported the consequence on april eleven. in accession to fixate CVE-2023-2033, the chrome update besides fix a assortment of write out detected during inner audit and early enterprise, the company pronounce. This exist the first zero-day vulnerability report inch chrome this year. in december, google turn associate in nursing update for chrome after a different type confusion vulnerability in V8 constitute identify.
Read more : JavaScript – Wikipedia
deoxyadenosine monophosphate type confusion error occur when angstrom program use one character of method acting to allocate oregon initialize a resource merely practice another method acting to access that resource, run to associate in nursing out-of-bounds memory access, accord to cybersecurity firm NSFocus, in associate in nursing alert information technology send about chrome ‘s december update. “ by convert a user to visit a specially craft web site, deoxyadenosine monophosphate distant attacker could ultimately achieve arbitrary code murder operating room cause deoxyadenosine monophosphate denial of service on the system, ” NSFocus state. last year, nine zero-day vulnerability constitute identify inch chrome .
in 2022, the number of know overt source vulnerability rise aside four % from 2021, according to a report aside Synopsys. at least one known open reference vulnerability be detected in eighty-four % of all commercial and proprietorship code basis examine by research worker, and forty-eight % of all code al-qaeda analyze check bad vulnerability
