Heads up, Chrome users! Google has just fixed another zero-day bug in its Chrome browser that was under exploitation. Since the fix is out, make sure to update your browsers at the earliest.
Google Chrome Zero-Day Fixed
Reportedly, a serious zero-day vulnerability exists in the Google Chrome browser that may potentially cause trouble to the users.
Regretfully, the vulnerability first caught the attention of criminal hackers before the Microsoft security researcher Alison Huffman. Consequently, the bug went under exploitation in the wild before the vendors could fix it.
However, after discovering this bug, Huffman, from the Microsoft Browser Vulnerability Research, reported the bug to Google.
The vulnerability has received the CVE ID CVE-2021-21166. Whereas, Google has identified it as a high-severity “Object lifecycle issue in audio”.
Google has fixed this vulnerability with the release of Chrome 89.0.4389.72 stable version for Windows, Mac, and Linux. Like always, Google hasn’t disclosed any details about the vulnerability to prevent further damages before the users could fix it.
Nonetheless, they do admit the active exploitation of this flaw in their post.
Google is aware of reports that an exploit for CVE-2021-21166 exists in the wild.
Update Your Browser Now
Aside from the zero-day, the latest Chrome browser release also includes 46 other security fixes. These include 8 high-severity vulnerabilities, 6 medium-severity flaws, and 8 low-severity bugs.
These vulnerabilities caught the attention of different researchers who then reported them to Google.
The high-severity bugs include 2 other bugs also reported by Alison Huffman (CVE-2021-21163 and CVE-2021-21165).
Since this browser update includes so many security fixes, all Chrome users must ensure updating their devices at the earliest.
This recent fix marks the second consecutive Chrome zero-day fix from Google in consecutive months. Earlier, they patched another zero-day vulnerability in February that Google described as a heap buffer overflow in V8.
Whereas, before that, it patched numerous zero-days in Chrome in 2020 as well.