If you use Google Chrome or a Chromium-based web browser, you need to update it ASAP.
Google's latest update for Chrome, version 128.0.6613.84/.85 (Windows/Mac) and 128.0.6613.84 (Linux), comes with patches for 38 security vulnerabilities, eight of which Google identifies as "High" severity. Google detailed all these patches in its latest Chrome Releases blog post, running through each vulnerability's type, severity, reward (the money rewarded to the researcher who discovered it), and noting who reported the flaw.
While it's important to fix all these vulnerabilities, one of them is more important than others: The vulnerability, a zero-day, is tracked as CVE-2024-7971, and is a type confusion flaw affecting Chrome's V8 JavaScript engine. Type confusion occurs when a program processes an object without checking its type first: If that type is incompatible or incorrect, it can create a vulnerability that bad actors can exploit.
That's the case with CVE-2024-7971: Google confirmed in its blog post that the company is aware an exploit for this vulnerability exists in the wild, which means someone, somewhere knows how to use it. Worse yet, this vulnerability doesn't require an attacker to have physical access to your browser, as a remote hacker was able to exploit it. The chances may be low that a hacker would both know about this exploit and have their eyes set on your Chrome browser, but the odds aren't zero. Why take the risk?
According to The Hacker News, this is the ninth zero-day vulnerability Google has addressed this year, and the third type confusion issue affecting its V8 JavaScript engine. Interestingly, it was Microsoft Security Response Center who reported the bug, earning $11,000 in the process.
While the other 37 vulnerabilities aren't zero-days, and thus have no known active exploits at this time, they're still important to patch immediately. Now that these flaws are out in the open, it's only a matter of time before bad actors figure out how to exploit them, too. If you browser isn't updated, you're left vulnerable to any of these potential exploits.
As noted above, this bug doesn't just affect Chrome, but all browsers built on the open-source platform Chromium. That includes Chrome, of course, but also Microsoft Edge, Opera, Brave, and Vivaldi. If you use any of these browsers, you should update as soon as possible.
To update Chrome, tap on the three dots in the top-right corner of your window, then go to Help > About Google Chrome. Let Chrome look for a new update. If one is available, you can click Relaunch to allow the browser to install the patch.
By default on Safari, Mac users can view link previews in separate windows to take a peek at the website they're about to visit without clicking throu
Using a Microsoft account with Windows 11 is the best way to access all of its features, including Microsoft Copilot, OneDrive, and more. But some peo
Samsung's Odyssey series has consistently been one of the industry's most sought-after and well-rated gaming monitors. Back in January, during CES, th
There’s a non-zero chance that the lithium battery in your device might, well, explode. Between 2012 and 2017, the U.S. Consumer Product Safety Commis
There are many ways to try upcoming Firefox features, but most of them involve using a beta version of the browser. For most people, these builds aren
Using a computer is a lot faster if you become a keyboard shortcut ninja instead of doing everything with your mouse or trackpad. The problem: browsin
We are a dynamic information platform dedicated to delivering timely, relevant, and reliable content across a broad spectrum of topics. From the latest in technology and business to lifestyle, health, and global affairs, we aim to keep our readers informed and inspired.
Our editorial team is committed to maintaining high standards of accuracy and clarity, ensuring that every article provides value and context in an ever-changing world. We believe in the importance of accessible knowledge and strive to make complex topics understandable for everyone.
Whether you're here to stay updated on current events, explore thought-provoking features, or simply learn something new, our goal is to offer a trustworthy source of information that meets the needs of a diverse and curious audience.