High Threat Security Alert (A24-01-13): Multiple Vulnerabilities in Google Chrome

Description:

Google released a security update to address multiple vulnerabilities in Google Chrome. A remote attacker could entice a user to open a web page with specially crafted content on a vulnerable browser to exploit the vulnerabilities.

Reports indicate that the vulnerability (CVE-2024-0519) is being exploited in the wild. Users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

Affected Systems:

• Google Chrome prior to version 120.0.6099.224 for Linux and Windows
• Google Chrome prior to version 120.0.6099.234 for Mac

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service or information disclosure on an affected system.

Recommendation:

Users of affected systems should update the Google Chrome to version 120.0.6099.224 (Linux and Windows), 120.0.6099.234 (Mac) or later to address the issue. The update can be obtained through the auto-update mechanism or manually by visiting the "About Google Chrome" page. Concerned users should relaunch the Google Chrome to make the update effective.

More Information:

• https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html
• https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20240117
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0517 (to CVE-2024-0519)