Seemingly overlooked in initial reports, the vulnerability isn’t unique to Chrome since it resides in the Chromium Open Software Software, which other companies use as the base code for their browsers. Google did warn, however, that it’s aware that an exploit for the vulnerability exists in the wild. The update to Chrome also addresses a range of minor issues and fixes from internal audits, fuzzing and other initiatives. Although Google did not provide further details of the vulnerability, the Common Vulnerabilities and Exposure listing on the National Institute of Standards and Technology websites describes it as allowing a remote attacker potentially to exploit heap corruption via a crafted HTML page. The Chrome update addresses the vulnerability designated CVE-2023-2033, which Google describes as a “Type Confusion in V8” vulnerability discovered by Clément Lecigne of Google’s Threat Analysis Group on April 11.

Google LLC has released a security update to its popular Chrome browser that addresses a vulnerability that’s being actively exploited in the wild.

Chrome browser google update