Skip to main content
3 reportsPriority High

Google Chromium vulnerability and update

A newly disclosed vulnerability in Google Chromium could allow remote code execution, with reports of active exploitation. An update has been released to address the issue.

First report Latest

What is going on

  • A use-after-free vulnerability in Google Chromium's XML component was disclosed, potentially allowing remote code execution via a crafted webpage.
  • The vulnerability is reported to be actively exploited in the wild, with a known-exploited catalogue entry.
  • A new version of Chrome for iOS, 158.0.8127.32, has been released to address the issue, though confirmation of its deployment is required.
  • No specific CVE has been assigned to the update, but it is linked to the previously disclosed vulnerability.
  • What to watch: Further details on the exploitation methods and confirmation of the update's deployment across affected systems.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed