Google Launches Emergency Chrome Update to Patch CVE-2024-4761 Vulnerability Discovered by Anonymous Researcher
Last Saturday, Google swiftly issued an emergency update for its Chrome browser to address the CVE-2024-4671 vulnerability, which was discovered and reported by an anonymous security researcher on May 8. Google confirmed the vulnerability and released a security patch within two days to mitigate the issue.
The CVE-2024-4671 vulnerability has already been exploited by hackers. In response to ongoing security concerns, Google has released another update for Chrome today to fix the CVE-2024-4761 vulnerability, which has also been exploited by hackers.
The latest versions, Chrome v124.0.6367.207 and v124.0.6367.208, address the CVE-2024-4761 vulnerability related to an out-of-bounds write issue in the V8 engine. This flaw could lead to unauthorized data access, arbitrary code execution, or cause the browser to crash.
Interestingly, this vulnerability was also reported by an anonymous researcher on May 9, raising speculation about whether it was the same individual who reported CVE-2024-4671.
Users of Chrome are strongly encouraged to update their browser to the latest version to ensure their safety. Google plans to gradually disclose details of the fixed security vulnerabilities in Chrome after a majority of users have updated to the unaffected versions.
Users of other browsers, including Microsoft Edge, Vivaldi, Opera, and Brave, should also be on the lookout for updates and upgrade their browsers as soon as possible to protect against these vulnerabilities.
Note: Version 124.0.6367.208 is intended for Windows users, while version 124.0.6367.207 is for Mac and Linux systems.