Skip to main content

Google Releases Security Update Addressing Multiple Vulnerabilities in Google Chrome

Security update addresses six high severity vulnerabilities in Google Chrome, including an actively exploited zero-day vulnerability

Threat ID:
CC-4414
Threat Severity:
Medium
Published:
29 November 2023 2:34 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Security update addresses six high severity vulnerabilities in Google Chrome, including an actively exploited zero-day vulnerability

Threat details

Introduction

Google has released a security update which addresses six high severity vulnerabilities in Google Chrome for Windows, Mac, and Linux.

The high severity vulnerabilities include a zero-day tracked as CVE-2023-6345 related to an integer overflow. 

Zero-day vulnerability CVE-2023-2136

Google released patches for a similar integer overflow zero-day vulnerability (CVE-2023-2136) in the same component in April 2023, as this vulnerability had also been actively exploited.

This has been covered in a prior Cyber Alert CC-4305.

Exploitation of CVE-2023-6345

Google is aware that an exploit for CVE-2023-6345 exists in the wild.

Remediation advice

Affected organisations are encouraged to review the Chrome Release and apply the necessary updates to the latest release.

Last edited: 29 November 2023 2:35 pm