Google issues emergency update to fix new zero-day vulnerability
Google has issued emergency update of Chrome 105.0.5195.102 for Windows, Mac, and Linux users to convey the high-severity security flaw, which is the sixth Chrome zero-day vulnerability exploited in attacks.
Accordingly, Google is working to provide the Chrome users with enough time to update and stop the exploitation attempts until more cyberattackers create their own malware to exploit.
Accordingly, the zero-day vulnerability was fixed today which is a high severity vulnerability started by the scarce data validation in Mojo, which facilitates message passing across the arbitrary inter and intra-process boundaries.
The security researchers found that the zero-day was exploited in the wild. However, it is yet to share the technical details related to these incidents. It is been doubted that the access to the vulnerability details and links may be kept blocked until the users are updated with a solution.
Consequently, the zero-day vulnerability was exploited in several campaigns and phishing emails by using fake job applications and websites to lure the users and host exploit kits.