Google on Monday released security updates for Chrome web
browser to address a total of 11 security issues, two of which it
says are actively exploited zero-days in the wild.
Tracked as CVE-2021-30632 and
CVE-2021-30633, the vulnerabilities[1]
concern an out of bounds write in V8 JavaScript engine and a use
after free flaw in Indexed DB API respectively, with the internet
giant credited anonymous researchers for reporting the bugs on
September 8.
As is typically the case, the company said it’s “aware that
exploits for CVE-2021-30632 and CVE-2021-30633 exist in the wild”
without sharing additional specifics about how, when, and where the
vulnerability was exploited, or the threat actors that may be
abusing them.
With these two security shortcomings, Google has addressed a
total of 11 zero-day vulnerabilities in Chrome since the start of
the year —
Chrome users are advised to update to the latest version
(93.0.4577.82) for Windows, Mac, and Linux by heading to Settings
> Help > ‘About Google Chrome’ to mitigate the risk
associated with the flaw.
References
- ^
vulnerabilities
(chromereleases.googleblog.com)