A high-severity type confusion vulnerability in the V8 JavaScript engine of Google Chrome was recently discovered by independent researchers.

As a result of this discovery, Google Chrome users are urged to update their browsers immediately.

The flaw, identified as CVE-2024-12053, could allow attackers to execute remote code on affected systems, potentially leading to system compromise and data theft.

The vulnerability was reported on November 14, 2024, by security researchers “gal1ium” and “chluo,” who were awarded an $8,000 bounty for their discovery.

While the cybersecurity analysts noted that Google has promptly addressed the issue in its latest Chrome update, version 131.0.6778.108/.109 for Windows and Mac, and 131.0.6778.108 for Linux.

Type confusion vulnerabilities occur when a program allocates memory for one data type but mistakenly treats it as another.

Leveraging 2024 MITRE ATT&CK Results for SME & MSP Cybersecurity Leaders – Attend Free Webinar

Type Confusion Vulnerability

In the case of CVE-2024-12053, this flaw in Chrome’s V8 engine could be exploited by attackers to run malicious code, potentially gaining unauthorized access to users’ systems and sensitive information.

This latest security patch is part of a larger update that addresses four security issues in total.

While Google has not provided specific details about the attacks exploiting this vulnerability, the company typically restricts such information until a majority of users have updated their browsers to mitigate potential risks.

The Chrome security team emphasized the importance of their ongoing internal security efforts, which have led to various fixes resulting from audits, fuzzing, and other initiatives.

These proactive measures, including the use of advanced tools like AddressSanitizer and MemorySanitizer, play a crucial role in detecting and preventing security bugs before they reach the stable channel.

Users are strongly advised to update their Chrome browsers as soon as possible. While Chrome typically updates automatically, users can manually check for updates by navigating to the browser’s settings menu and selecting “About Google Chrome.”

This incident underscores the critical importance of promptly applying security updates and maintaining vigilance in the face of evolving cyber threats.

As the update rolls out over the coming days and weeks, users should remain cautious and avoid clicking on suspicious links or downloading files from untrusted sources.

Analyse Advanced Malware & Phishing Analysis With ANY.RUN Black Friday Deals : Get up to 3 Free Licenses.

The post Google Chrome Type Confusion Vulnerability Let Attackers Execute Remote Code appeared first on Cyber Security News.