Patch Now: Another Google Zero-Day Under Exploit in the Wild

  /     /     /  
Publicated : 23/11/2024   Category : security


Patch Now: Another Google Zero-Day Under Exploit in the Wild


Google has rolled an emergency patch for CVE-2024-4947, the third Chrome zero-day its addressed in the past week.



Another Google Chrome zero-day vulnerability is being exploited in the wild, the tech giant has disclosed — the third such bug revealed in just a week.
Google has pushed an
emergency fix
for the high-severity flaw (CVE-2024-4947) with version 125.0.6422.60/.61 for Mac/Windows and 125.0.6422.60 for Linux. According to the bug advisory, its a
type-confusion weakness
in the open source Chrome V8 JavaScript engine. While Google didnt detail the types of attacks that are underway using the exploit, these types of bugs can lead to browser crashes and, in some cases, code execution.
Google is aware that an exploit for CVE-2024-4947 exists in the wild, according to the advisory, released May 15.
The bug also affects Chromium-based browsers such as Microsoft Edge;
Microsoft said
that its working on a fix.
This is the third
zero-day that Google has patched
in the last week, following the disclosure of CVE-2024-4761 (an out-of-bounds write vulnerability in V8 that has exploit code publicly available) and CVE-2024-4671 (a use-after-free flaw in the Visuals component thats under active exploit); both allow sandbox escape.

Last News

▸ ArcSight prepares for future at user conference post HP acquisition. ◂
Discovered: 07/01/2025
Category: security

▸ Samsung Epic 4G: First To Use Media Hub ◂
Discovered: 07/01/2025
Category: security

▸ Many third-party software fails security tests ◂
Discovered: 07/01/2025
Category: security


Cyber Security Categories
Google Dorks Database
Exploits Vulnerability
Exploit Shellcodes

CVE List
Tools/Apps
News/Aarticles

Phishing Database
Deepfake Detection
Trends/Statistics & Live Infos



Tags:
Patch Now: Another Google Zero-Day Under Exploit in the Wild