After Apple issued a string of security patches to fix a critical WebKit vulnerability in Safari on the Mac, Google has released an emergency security update for its own Chrome browser to patch a vulnerability that has been exploited in the wild.
Google has labeled the vulnerability as high risk and urges all users to update to version v112.0.5615.121. The update, which arrived on April 14, includes two security fixes, one of which is divulged as a type confusion bug in V8 discovered by Google’s Threat Analysis Group on April 11. Google says it is aware that the vulnerability has been exploited in the wild but declined to provide specific details.
As usual, Google is restricting access to specific information about the flaw until “a majority of users are updated with a fix.” The second flaw isn’t divulged but Google reports that “ongoing internal security work was responsible for a wide range of fixes.”
This is the first patch of 2023 that fixes a zero-day. In 2022, Google pushed nine Chrome emergency updates to fix zero-day flaws for Chrome and had already released three by mid-April.
To update Chrome, click on the Chrome menu, then About Chrome. Check the version number to see if it’s been updated to v112.0.5615.121. If not, click Download and Install, and follow the prompts.
