⚡ TL;DR | Go Straight to the Google Chrome 120 Vulnerability Audit Report
Google has released emergency security updates for Chrome 120 for Windows, Linux, and Mac in response to a couple of high-severity vulnerabilities, one of which is already being actively exploited. The issue could allow attackers to access sensitive data or even trigger crashes. We have added a new report to Lansweeper to help you locate vulnerable Chrome installations.
Chrome 120 Vulnerability CVE-2024-0519
The new security update for Chrome 120 includes 4 security fixes, however, the main concern is with the vulnerability tracked as CVE-2024-0519, as it is already being exploited in the wild. It is a high-severity out-of-bounds memory access bug in V8. It could allow a malicious actor to gain access to data beyond the memory buffer. This could seriously compromise sensitive information or even trigger crashes. You can find more information on Chrome’s release page.
Update Vulnerable Chrome Installations
As always, Google isn’t releasing any additional bug details yet. This is to give users the chance to update their installations first so that malicious actors won’t be able to leverage the additional information for further attacks.
In order to protect your environment against possible attacks, make sure to update all installations of Google Chrome to the latest version (120.0.6099.234 for Mac, 120.0.6099.224 for Linux, and 120.0.6099.224/225 for Windows) as soon as possible.
Discover Vulnerable Chrome Installs
We have updated the Google Chrome 120 audit report for Lansweeper to help you locate any vulnerable installations of Google Chrome in your network. This report will give you an actionable list of installations that are not on the latest version yet and require an update. You can get the report via the link below.
