Google Patches Zero-Day Vulnerability with Emergency Chrome Update

Mike_BD

Google pushed an emergency Chrome update this week to fix a severe zero-day vulnerability that has been exploited in the wild.

The patched zero-day, tracked as CVE-2021-4102, was reported by an anonymous researcher on the 9th of December, but little else is known about it. Google Chrome’s Stable and Extended Stable channels were then updated to 96.0.4664.110 for Windows, Mac, and Linux users.

CVE-2021-4102 is a Use After Free Chrome V8 JavaScript engine vulnerability. Perpetrators rely on Use After Free vulnerabilities to crash certain programs, make them use unexpected values, or even execute arbitrary code.

Full article on Hot4Security