Google Chrome has issued an urgent security update to fix critical vulnerabilities in its browser.
The Security Advisory notes that this update addresses CVE-2024-4671, a flaw that could let remote attackers escape the browser’s sandbox through specially crafted web pages. Another fixed issue, CVE-2024-4761, involves an out-of-bounds write in Google’s V8 JavaScript engine, also exploitable via crafted web pages.
To effectively mitigate these risks, it is essential to keep Chrome updated. We recommend updating Chrome to version 124.0.6367.207 or later by going to Settings > About Chrome and restarting the browser if an update is available.
Another advisory noted that Google has released Android security updates for June 2024 via Google Play Protect, addressing 37 vulnerabilities. The updates come in two security patch levels (SPLs): 2024-06-01 (SPL), which fixes 19 issues in framework and system components, and 2024-06-05 (SPL), which resolves 18 issues in Kernel, Imagination Technologies, Arm, MediaTek, and Qualcomm components.
WearOS received patches for 3 vulnerabilities under 2024-06-01 (SPL), while Android AutomotiveOS (AAOS) includes the 2024-06-05 (SPL) fixes. All Android users are advised to enable Google Play Protect to receive notifications for the latest updates and ensure their devices are up-to-date with the latest security patches.
Devices running Android OS are also advised to update to version 11 or later.
