On May 16 2024, Google has released a security update for its Chrome browser to address a high-severity zero-day vulnerability, marking the third such patch in a week. The vulnerability, tracked as CVE-2024-4761, is an out-of-bounds write bug in Chrome’s V8 JavaScript engine. It was reported anonymously on May 9, 2024, and Google has confirmed that it has been actively exploited in the wild.

A zero-day vulnerability is a software flaw that is unknown to the software vendor and has already been exploited by attackers. These vulnerabilities are particularly dangerous because there is no patch available to fix them, giving attackers a significant advantage.

We recommend that users update to the following versions as soon as possible:

  • Mac/Windows: 125.0.6422.60/61
  • Linux: 125.0.6422.60

How to update Chrome:

  • Open Chrome and click on the three dots in the top right corner.
  • Select “Help” and then “About Google Chrome.”
  • Chrome will check for updates and download and install them automatically if available.
  • Restart Chrome for the update to take effect.

If you are using another Chromium-based browser, such as Microsoft Edge, Brave, Opera, or Vivaldi, it is also important to update it as soon as possible to get the latest security patches.