High Threat Security Alert (A23-06-01): Vulnerability in Google Chrome

Description:

Google released a security update to address a vulnerability in Google Chrome. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerability.

Reports indicate that the remote code execution vulnerability (CVE-2023-3079) is being exploited in the wild. Users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Google Chrome prior to version 114.0.5735.106 (Mac and Linux)
• Google Chrome prior to version 114.0.5735.110 (Windows)

Impact:

Successful exploitation of the vulnerability could lead to remote code execution on an affected system.

Recommendation:

Users of affected systems should update the Google Chrome to version 114.0.5735.106 (Mac and Linux), 114.0.5735.110 (Windows) or later to address the issue. The update can be obtained through the auto-update mechanism or manually by visiting the "About Google Chrome" page. Concerned users should relaunch the Google Chrome to make the update effective.

More Information:

• https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html
• https://www.hkcert.org/security-bulletin/google-chrome-remote-code-execution-vulnerability_20230606
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3079