Google has released a security update for the Chrome browser to address a highly critical zero-day vulnerability, the fourth of its kind discovered in May and the eighth in 2024. This vulnerability, identified as CVE-2024-5274, is a flaw in the V8 JavaScript engine.

Zero-day vulnerabilities are security flaws in software that are termed “zero-day” because developers have “zero” days to fix the issue due to its discovery and exploitation by hackers before developers become aware of it.

Users are advised to update their Chrome browsers as soon as possible to versions 125.0.6422.112/113 for Mac/Windows and 125.0.6422.112 for Linux. If you are using other browsers based on Chrome, such as Microsoft Edge, Brave, Opera, or Vivaldi, it is equally important to update them promptly to receive the latest security fixes.

  1. How to Update:
    Open Chrome and click on the three dots in the top right corner.
  2. Select “Help” and then “About Google Chrome.”
  3. Chrome will check for updates and download and install them automatically if available.
  4. Restart Chrome for the update to take effect.

On the About page, you will see the current version number. Chrome will automatically check for updates and install them if available. For Windows, the update process happens on this page. For other operating systems, you may need to update the browser through your application store.

This particular vulnerability is the fourth related to the V8 engine among the eight discovered in 2024. These vulnerabilities can lead to unauthorized access to the victim’s device and enable remote attacks.

Keeping your browser up-to-date is essential for maintaining security and protecting against such critical vulnerabilities.