Cyber Security News

Chrome Security Update: Patches Widely Exploited Zero-Day Flaw

Google has upgraded the Stable and Extended stable channels to 116.0.5845.187 for Mac and Linux and 116.0.5845.187/.188 for Windows as part of a security update for Chrome. 

This release comes with one “Critical” security patch. The upgrade will roll out over the following days and weeks. 

Critical Vulnerability Addressed

Heap buffer overflow in WebP is a critical vulnerability tracked as (CVE-2023-4863). 

“Google is aware that an exploit for CVE-2023-4863 exists in the wild”, Google said in its security advisory.

The Citizen Lab at The University of Toronto’s Munk School and Apple Security Engineering and Architecture (SEAR) reported this on September 6th.

The firm is still withholding more information about the attacks.

“Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Google explains. 

In order to ensure the safety and security of our projects, we may need to maintain limitations if a bug is discovered in a third-party library that is also utilized by other projects. If this issue has not yet been resolved, it is critical that we continue to impose restrictions to prevent any potential harm or damage that may result from exploiting the vulnerability, Google said.

Chrome Security Update

“The Stable and Extended stable channels have been updated to 116.0.5845.187 for Mac and Linux and 116.0.5845.187/.188 for Windows, which will roll out over the coming days/weeks”, Google said.

Chrome for Linux and MacOS: 116.0.5845.187

Chrome for Windows: 116.0.5845.187/.188

How to Update Google Chrome

  • On your computer, open Chrome.
  • At the top right, click More.
  • Click Help About Google Chrome.
  • Click Update Google Chrome. Important: If you can’t find this button, you’re on the latest version.
  • Click Relaunch.

The update should be installed soon to protect the system and browser against issues.

Keep informed about the latest Cyber Security News by following us on Google NewsLinkedinTwitter, and Facebook.

Guru Baran

Gurubaran KS is a cybersecurity analyst, and Journalist with a strong focus on emerging threats and digital defense strategies. He is the Co-Founder and Editor-in-Chief of Cyber Security News, where he leads editorial coverage on global cybersecurity developments.

Recent Posts

Hackers Target AI Infrastructure With RCE, Prompt Injection and API Key Theft

Hackers are actively probing AI systems, turning exposed gateways and agent tools into routes for…

4 hours ago

Hackers Make Phishing Pages Change Their Code Every Time Someone Opens Them

Hackers are making some phishing pages harder to track by changing the code delivered to…

4 hours ago

Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days

A cyber incident reportedly forced a British power plant to halt operations for about four…

5 hours ago

Russian Hackers Use New HOOKEDGE Malware to Spy on European Defense and Diplomatic Targets

Russian hackers have used a new backdoor called HOOKEDGE to target defense manufacturers, government bodies,…

6 hours ago

Ransomware Gang Claims AI Can Analyze 700GB of Stolen Data Every Hour

TITAN ransomware is pairing file encryption with an ambitious claim: artificial intelligence that can sort…

6 hours ago

Hackers Compromise Hundreds of WordPress Sites to Deploy Amatera Stealer via ClickFix

A fake student resume is being used to place a remote-access tool on researchers’ Windows…

7 hours ago