New Chrome Browser 0-day Under Active Attack

Denise GillinInsurance, Risk Management

By Ravie Lakshmanan for The Hacker News

Google has patched a zero-day vulnerability in Chrome web browser for desktop that it says is being actively exploited in the wild.

The company released 88.0.4324.150 for Windows, Mac, and Linux, with a fix for a heap buffer overflow flaw (CVE-2021-21148) in its V8 JavaScript rendering engine.

“Google is aware of reports that an exploit for CVE-2021-21148 exists in the wild,” the company said in a statement.

The security flaw was reported to Google by Mattias Buelens on January 24.

Read more here >>>

 

Share this Post