This week has been a nightmare for Google and its 2 billion desktop Chrome users as three zero-day security threats have been added to CISA’s Known Exploited Vulnerabilities catalog. The vulnerabilities have been actively exploited in the wild, posing a serious risk to users. Google has issued warnings for each vulnerability and urged users to ensure their browsers are updated to protect themselves from potential attacks.
The first vulnerability, CVE-2024-4671, was identified on May 9 and was a “use after free” issue that could allow an attacker to gain control over a victim’s system. This was followed by CVE-2024-4761 on May 13, targeting Chrome’s V8 Javascript engine with an “out of bounds” memory vulnerability. Finally, on May 15, Google warned of another exploit, CVE-2024-4947, which was a “type confusion” vulnerability that could expose users to a crafted HTML page attack. These vulnerabilities could destabilize the browser or device and enable other exploits to run.
While most users have Chrome set to update automatically for security updates, it is important to manually close and relaunch Chrome to ensure the updates have been fully installed. Given the severity of the three zero-day vulnerabilities discovered in such a short period, users are advised to take extra precautions by manually updating their browsers and even considering restarting their devices to further safeguard against potential attacks. CISA has also warned that the vulnerabilities could affect other web browsers that utilize Chromium.
Google’s timely emergency updates have made headlines worldwide, prompting users to take action to protect themselves from potential attacks. The company has taken steps to address the vulnerabilities and ensure that users are informed about the risks and necessary precautions. Despite the challenges faced by Google and its Chrome users, it is important for users to stay vigilant and take proactive measures to ensure their online security. By following the recommended steps to update their browsers, users can protect themselves from potential threats and stay safe while browsing online.
