Chrome Receives Urgent Security Update Due to Critical Flaw

In a move underscoring its commitment to user safety, Google has rolled out a crucial security patch for Chrome. Addressing a zero-day vulnerability that’s already under active exploitation, this update marks the eighth security enhancement for Chrome in 2023 alone. Notable Security Update for Chrome in 2023

The revised versions are 120.0.6099.129/130 for Windows and 120.0.6099.129 for macOS and Linux, now accessible to all Chrome users.

This particular vulnerability came to light thanks to the vigilance of Clément Lecigne and Vlad Stolyarov from Google‘s Threat Analysis Group (TAG). Comprising seasoned security professionals, TAG is dedicated to safeguarding Google’s clientele from state-backed cyber intrusions. Such vulnerabilities often become tools for government-affiliated hackers aiming to compromise the devices of notable figures like political dissidents, journalists, and activists.

Identified as CVE-2023-7024, the vulnerability stems from a WebRTC-related buffer overflow. While WebRTC facilitates real-time web communication across platforms, similar features are also offered by browsers like Mozilla Firefox, Apple Safari, and Microsoft Edge.

Google has opted for a restrained disclosure approach at this juncture, emphasizing user security. The tech giant intends to elucidate further once a significant portion of its user base has updated to the latest version.