Google has just had to release a Chrome update comprised of multiple emergency security updates because of zero-day vulnerabilities – for the fourth time this year. Zero-day vulnerabilities in software (in this case, Chrome) are vulnerabilities that are already known to the wider public and assumed to be known by bad actors. It’s also assumed those bad actors are either actively trying to or already exploiting those vulnerabilities. The “zero-day” refers to developers having zero days ahead of the wider audience in terms of knowing about and being able to address the bug. Here’s what is known about this particular zero-day loophole so far: The vulnerability has been labelled CVE-2023-4863 by Google, and according to Help Net Security, it’s a ‘critical heap buffer overflow vulnerability’ in Chrome’s code. It explains that buffer overflows can cause crashes and infinite loops, and these moments of overwhelm can be exploited to deploy arbitrary code. Google brought this issue to attention […]