Google Chrome browser has been updated to 120.0.6099.224/225/234

Google Chrome browser has been updated to 120.0.6099.224/225/234, which fixes three serious vulnerabilities including CVE-2024-0519.

Google yesterday updated version 120.0.6099.224/225/234 for the desktop platform Chrome browser, urgently fixing three serious vulnerabilities, one of which, CVE-2024-0519, a zero-day vulnerability, has been exploited by hackers. , friends can click here to download the latest version.

A researcher at the security company Qrious Secure, announced CVE-2024-0517. The vulnerability has a CVSS v3 score of 8.8 and is an out-of-bounds write vulnerability in the browser V8 engine .

CVE-2024-0518 is a type confusion vulnerability in the V8 engine. It was reported by Ganjian Zhou (@refrain_areu), a researcher from the ChaMd5-H1 team. The CVSS v3 score of this vulnerability has not been announced.

Google highlighted a zero-day vulnerability called CVE-2024-0519 that has been exploited by hackers. This is a memory access vulnerability in the browser V8 engine , which allows hackers to trigger stack corruption through specific HTML pages and then execute on the victim device. Malicious code, but the relevant vulnerability score has not yet been announced.

According to earlier report, Google was previously accused of “illegally tracking browsing activities even after users turn on Chrome’s incognito mode.” The company has quietly released the latest version of Chrome Canary (122.0. 6251.0) to avoid accusations.