Now and then, this tactic is adopted in a malicious campaign, to catch those who aren't familiar with how Chrome works or how Google updates its products. Scammers and threat actors have used this tactic many times in the past, and, for a time, it worked. Google would never let users manually download and install a separate file to update Chrome. Click the button to confirm and complete the update process. Once done, the browser will ask you to relaunch. Simply doing this should trigger Chrome to update.

Click the three vertical dots at the upper right-hand side of the URL bar.Google Chrome typically updates automatically. Google is giving all its Chrome users enough time to update to the latest version until technical details are released. 'We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven't yet fixed.' 'Access to bug details and links may be kept restricted until a majority of users are updated with a fix,' says Google in the advisory. Exploiting a weakness in V8 typically leads to a browser crashing. However, we know that attacks on V8, although uncommon, are considered one of the most dangerous. As with zero-day patch announcements, the company supplied little to no details on how attackers could exploit this flaw. Google knows an exploit code for this flaw already exists and is circulating in the wild.ĬVE-2023-2033 is a type-confusion bug in V8, Google's open-source JavaScript and WebAssembly engine. The page could run arbitrary code in the browser, potentially leading to your computing device being hijacked. The vulnerability, tracked as CVE-2023-2033, is exploitable when a user visits a malicious webpage using an unpatched Chrome browser. If you use other Chromium-based browsers, you may need to update them as well. Updating your browser can be done manually or automatically. The company urges all its Windows, Mac, and Linux users to update to version 1.121 immediately, as this flaw is present in Chrome versions before this one. In a recent security advisory, Google says it patched a high-severity zero-day security flaw in its Chrome browser- the first in 2023-currently being exploited in the wild by threat actors.

Update google chrome browser