In response to ongoing exploitation in attacks, Google has urgently addressed the sixth Chrome zero-day vulnerability of the year through a security update released.
The company acknowledged the existence of an exploit for the security flaw (identified as CVE-2023-6345) in a newly published security advisory, according to BleepingComputer.
The vulnerability has been resolved in the Stable Desktop channel, and patched versions have been globally rolled out to Windows users (119.0.6045.199/.200) and Mac and Linux users (119.0.6045.199).
The company stated that details of the zero-day will be restricted until a significant number of users have updated their browsers.
If the vulnerability also affects third-party software that remains unpatched, the restrictions on accessing bug details and links will be prolonged.
The security update should already be available for download. Go to the upper right-hand corner and click the vertical ellipsis > Help > About Google Chrome. This should start searching for the update, and just restart the browser when prompted.
Users who prefer not to update manually can rely on the web browser to automatically check for and install new updates after the next launch.
