Google push emergency Chrome update to patch two actively exploited Zero-day vulnerabilities

Reading time icon 1 min. read

Readers help support MSPoweruser. When you make a purchase using links on our site, we may earn an affiliate commission. Tooltip Icon

Read the affiliate disclosure page to find out how can you help MSPoweruser effortlessly and without spending any money. Read more

Google has patched its 15th zero-day vulnerability for Chrome, with the out of band release of Chrome 95.0.4638.69 for Windows, Mac, and Linux.

The release patches two zero-day vulnerabilities which are being actively exploited in the wild.

“Google is aware that exploits for CVE-2021-38000 and CVE-2021-38003 exist in the wild,” Google disclosed in the list of security fixes in today’s Google Chrome release.

CVE-2021-38000 is due to “Insufficient validation of untrusted input in Intents” and was assigned a High severity level.

CVE-2021-38003, is a High severity “Inappropriate implementation” bug in the Chrome V8 JavaScript engine.

Google did not say how the vulnerabilities are being exploited.

Besides the two actively exploited zero-day vulnerabilities, there are 5 other vulnerabilities fixed with the update.

As the bugs are being actively exploited Chrome users are urged not to delay installing the update, most easily achieved by simply restarting your browser.

via BleepingComputer.