3 reportsPriority High
Google Chromium vulnerability and update
A newly disclosed vulnerability in Google Chromium could allow remote code execution, with reports of active exploitation. An update has been released to address the issue.
First report Latest
What is going on
- A use-after-free vulnerability in Google Chromium's XML component was disclosed, potentially allowing remote code execution via a crafted webpage.
- The vulnerability is reported to be actively exploited in the wild, with a known-exploited catalogue entry.
- A new version of Chrome for iOS, 158.0.8127.32, has been released to address the issue, though confirmation of its deployment is required.
- No specific CVE has been assigned to the update, but it is linked to the previously disclosed vulnerability.
- What to watch: Further details on the exploitation methods and confirmation of the update's deployment across affected systems.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Research & news
Google DeepMind just mathematically verified key parts of Signal
- Priority LowType Vulnerability
Chrome Stable for iOS Update
- Priority HighType VulnerabilityLead report
Google Chromium Use-After-Free Vulnerability

