Google has pushed out a new security update to Chrome browser
for Windows, Mac, and Linux with multiple fixes, including a
zero-day that it says is being exploited in the wild.
The latest patch resolves a total of eight issues, one of which
concerns a type confusion issue in its V8 open-source and
JavaScript engine (CVE-2021-30563[1]). The search giant
credited an anonymous researcher for reporting the flaw on July
12.
As is usually the case with actively exploited flaws, the
company issued a terse statement acknowledging that “an exploit for
CVE-2021-30563 exists in the wild” while refraining from sharing
full details about the underlying vulnerability used in the attacks
due to its serious nature and the possibility that doing so could
lead to further abuse.
CVE-2021-30563 also marks the ninth zero-day addressed by Google
to combat real-world attacks against Chrome users since the start
of the year —
Chrome users are advised to update to the latest version
(91.0.4472.164) by heading to Settings > Help > ‘About Google
Chrome’ to mitigate the risk associated with the flaw.
References
- ^
CVE-2021-30563
(chromereleases.googleblog.com)