Friday, December 8, 2023

Emergency !! Hackers Exploited Active Google Chrome Zero-day in Wide – Update Chrome Now

Google announced an emergency warning about active Google Chrome zero-day vulnerability that exploited in wide and urged users to update the chrome immediately.

Currently, the exploit is rapidly used by hackers and they continue to compromise Google Chrome users to gain complete control of the victim’s system.

This severe bug was reported by Clement Lecigne, of Google’s Threat Analysis Group on 2019-02-27 since the Google worked for the patch and finally, they released an emergency update with fixes for this Active zero-day vulnerability.

Google employees urged their online followers to update all their Chrome browser to 72.0.3626.121 for Windows, Mac, and Linux.

https://twitter.com/justinschuh/status/1103087046661267456

This Chrome zero-day Vulnerability ( CVE-2019-5786 ) mainly affected the Chrome browser’s FileReader API, that allows attackers to perform remote code execution by escaping the Chrome sandbox.

The FileReader API lets web applications asynchronously read the contents of files (or raw data buffers) stored on the user’s computer.

In this case, Zerodium Founder Chaouki Tweets that, “Google discovered a Chrome RCE #0day in the wild (CVE-2019-5786). Reportedly, a full chain with a sandbox escape”

All the users are strictly recommended to update your Chrome browser to newly released version Chrome update 72.0.3626.121

Newly updated Version

Google states in their update that “the stable channel has been updated to 72.0.3626.121 for Windows, Mac, and Linux, which will roll out over the coming days/weeks.”

Google did not reveal more details about this vulnerability and also said, “Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed “

Take a moment to check you are running the latest Chrome here else follow the step to update your browser in order to prevent from this active exploit in wide.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity updates also you can take the Best Cybersecurity courses online to keep your self-updated.

Hackers Exploit Google Chrome Zero-day using Weaponized PDF – If PDF Viewed in Chrome

Chrome 72 Released with 58 Security fixes, Removes HPKP and Deprecate TLS 1.0 and 1.1

Website

Latest articles

Exploitation Methods Used by PlugX Malware Revealed by Splunk Research

PlugX malware is sophisticated in evasion, as it uses the following techniques to avoid...

TA422 Hackers Attack Organizations Using Outlook & WinRAR Vulnerabilities

Hackers exploit Outlook and WinRAR vulnerabilities because these widely used software programs are lucrative...

Bluetooth keystroke-injection Flaw: A Threat to Apple, Linux & Android Devices

An unauthenticated Bluetooth keystroke-injection vulnerability that affects Android, macOS, and iOS devices has been...

Atlassian Patches RCE Flaw that Affected Multiple Products

Atlassian has been discovered with four new vulnerabilities associated with Remote Code Execution in...

Reflectiz Introduces AI-powered Insights on Top of Its Smart Alerting System

Reflectiz, a cybersecurity company specializing in continuous web threat management, proudly introduces a new...

SLAM Attack Gets Root Password Hash in 30 Seconds

Spectre is a class of speculative execution vulnerabilities in microprocessors that can allow threat...

Akira Ransomware Exploiting Zero-day Flaws For Organization Network Access

The Akira ransomware group, which first appeared in March 2023, has been identified as...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Endpoint Strategies for 2024 and beyond

Converge and Defend

What's the pulse of Unified Endpoint Management and Security (UEMS) in Europe? Join us live to uncover the strategies that are defining endpoint security in the region.

Related Articles