Subj : Dont fall prey to this worrying Google Chrome exploit update you To : All From : TechnologyDaily Date : Thu Dec 21 2023 16:00:05 Dont fall prey to this worrying Google Chrome exploit update your browser now Date: Thu, 21 Dec 2023 15:52:11 +0000 Description: Attackers are already exploiting this flaw in Chromes security, so be sure to patch quickly. FULL STORY ====================================================================== Google Chrome has a vulnerability of the most dangerous kind, so youll want to check that your browser is updated to the latest version which carries the fix. The worst kind of vulnerability is one thats known about, and Google has confirmed that this particular hole in Chrome has already been exploited. So not only is it known to malicious actors, but its also being actively leveraged against Chrome users, which is obviously bad news. The problem in this case, as outlined by Google , is a heap buffer overflow in WebRTC. (As the name suggests, this is an issue where an attacker causes an area of memory to be written to so it overflows, opening up the avenue for exploitation). This is known as vulnerability CVE-2023-7024, and Google acknowledges that an exploit for it exists out there. Heap and stack overflows are some of the more common attack vectors around, and indeed this is far from the first heap overflow gremlin that has troubled Googles web browser . How to fix this security flaw Fortunately, theres no need to panic all you have to do to protect yourself from this attack is open Chromes Settings page (from the three-dot menu, top-right of the browser). From there, look at the left-side panel, and click on About Chrome at the bottom of the list. Just opening this will automatically check for updates and apply an upgrade if its needed. To have protection against this exploit, on a Windows PC you should be on Chrome version 120.0.6099.130 (or alternatively 120.0.6099.129 and thats the version youll want to be running on Mac or Linux). When we checked, we were still running version 120.0.6099.110, and our Chrome browser hadnt updated itself yet. So, its well worth checking now, and getting this sorted before theres any chance of your PC being compromised. Dont forget that after Chrome has updated itself, youll need to close the browser (all instances of it), and reopen it to apply the upgrade then everythings sorted and youre good to go. Via Ghacks You might also like Swamped with browser tabs? Chrome could soon use AI to organize them for you Google forces a new look for Chrome but you can get rid of it if you hate it Google Chrome is copying this essential Edge feature - finally ====================================================================== Link to news story: https://www.techradar.com/computing/chrome/dont-fall-prey-to-this-worrying-goo gle-chrome-exploit-update-your-browser-now --- Mystic BBS v1.12 A47 (Linux/64) * Origin: tqwNet Technology News (1337:1/100) .