Google Chrome gets a patch for actively exploited zero-day vulnerability

Google released a Chrome stable update Thursday to patch a high-risk severity vulnerability that was being exploited in the wild, the second zero-day to be patched in Chrome this year.

The vulnerability, tracked as CVE-2024-4671, is described as a use-after-free memory bug in the browser’s Visual component. Details about the vulnerability are still restricted to public view, but the company said it is aware that an exploit for the flaw exists in the wild.

The Chrome developers credited an anonymous …

actively exploited browser bug chrome cve cve-2024 exploited free google google chrome high in the wild memory patch risk severity update use-after-free vulnerability zero-day zero-day vulnerability