Google Chrome Zero-Day Vulnerability Actively Exploited by Unknown Threat Actors (CVE-2023-3079)

On 5 June 2023, Google Chrome released a new security advisory with an urgent patch available for a newly discovered zero-day vulnerability (CVE-2023-3079) impacting Chrome. This is the third actively exploited zero-day in Chrome since the start of 2023, including the previously reported vulnerabilities; CVE-2023-2033 type confusion in V8 vulnerability and CVE-2023-2136, integer overflow in Skia vulnerability.

Google Chrome vulnerabilities are quickly weaponised by malicious actors given Chrome's wide net use and significant targeting surface. We recommend updating to the patched version and monitoring for unusual network traffic activity.

https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html