Google fixes fifth Chrome Zero-Day 2024

Google corrected this Chrome zero-day vulnerability five times this year, highlighting its ongoing fight against online threats

[{"selector":"#anim-6754713e-2b54-4761-9180-2679d55fef8c","keyframes":{"transform":["translate3d(-125.95155%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-208ff302-66f4-4046-94a9-0d1f3eab0a1a","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-67fa35b6-2a20-49f7-a6e9-cf4cc2030b7d [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Vulnerability Type: Chrome zero-day (CVE-2024-4671), a “use-after-free” vulnerability in the Visuals component of Chrome

[{"selector":"#anim-73bba691-dd1d-4b40-a4f9-a105d002cd8e","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-85efd94b-025b-4043-8b44-c280e5021513","keyframes":{"transform":["translate3d(-127.27273%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-8e2a7c0c-48ba-42ac-8acf-d3a4c0aa8969 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.39576402491543%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Install the latest Chrome browser for safety. Google Chrome usually updates automatically, but you can check settings manually

[{"selector":"#anim-812e21b0-af6d-4645-9e7b-e791c8816530","keyframes":{"transform":["translate3d(-120.54795%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-45015c57-c35f-456a-b1cd-58489819b4e7","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-f5a54193-fc46-49d0-a57d-c9d5d6e66649","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-bba8a972-8739-45c4-bd77-6c2b3d8eea18 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(32.91015614629949%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}]

Indeed, the following is what it know about the fifth zero-day vulnerability in Chrome that Google has patched

[{"selector":"#anim-cd597c56-02d3-44d9-a060-3246b15327d3","keyframes":{"transform":["translate3d(-122.61484%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-7dcbdfa4-6687-4e73-aaa4-8dcdc5288f55","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-a8bd3e8a-b88d-4c24-a10a-7b0f6e835b5d [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Potential vulnerability: “Use-after-free”. Attackers can exploit software that doesn’t properly free memory

[{"selector":"#anim-c562be1c-fe65-4a1d-a0a9-548f7653a4b1","keyframes":{"transform":["translate3d(-130.93526%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-721b99eb-d250-4620-902a-9d334c369690","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-7a748e51-8c1c-4618-81d0-bc33963948a5","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}] [{"selector":"#anim-fc0e46cd-d8c1-4530-b59d-a178ddfd6737 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-35.937499914669296%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Component: “Visuals” component in Chrome. This section of Chrome controls how your browser displays material

[{"selector":"#anim-031e82c9-f1c4-4015-adea-dfe5afca7a6b","keyframes":{"transform":["translate3d(-121.33333%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-813bd5c9-5b74-454e-9343-5df8aef6c1f3","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-3140f431-90d6-4757-829d-ccf9dbbaace9 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Actively exploited in nature. This suggests that attackers were using this issue before the patch was released

[{"selector":"#anim-2f98e459-f203-4ec9-9c71-ac487e5c70f1","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-2b264024-f823-448f-9d4c-ae54684c2516","keyframes":{"transform":["translate3d(-123.57143%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.2, 0.6, 0.0, 1)","fill":"both"}] [{"selector":"#anim-7a7f3583-8f52-4423-85d2-af3aa870f069 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Status of the Patch: Versions 124.0.6367.201/.202 (Mac & Windows) and 124.0.6367.201 (Linux) of Chrome have been patched

[{"selector":"#anim-cea0fc6c-cd61-497a-a11f-258882459d50","keyframes":{"transform":["translate3d(-116.96114%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-17812475-831c-4ae1-b677-46d80cdbe7ad","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-fa646c30-708c-41bd-a047-363cdc7d2d11 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]

Another Chrome zero-day vulnerability from last month’s Pwn2Own hacking competition been updated by Google For more details Govindhtech.com

[{"selector":"#anim-bbd4ce7d-1edf-46d4-86d7-01126dd1fc71","keyframes":{"transform":["translate3d(-117.14286%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .8, 1)","fill":"both"}] [{"selector":"#anim-20df1165-af6c-45ab-b558-cdd63aba9085","keyframes":{"transform":["rotateZ(-180deg)","rotateZ(0deg)"]},"delay":0,"duration":1000,"easing":"cubic-bezier(.2, 0, .5, 1)","fill":"forwards"}] [{"selector":"#anim-d983556f-e7fe-4aed-95d1-8c482bc1f965 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-34.249999904429615%, 0, 0) translate(-25%, 0%) scale(1.5)","translate3d(0%, 0, 0) translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"fill":"forwards"}]