Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability
![Image](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOQMnZQv3U267ax4muFaNNjz4xglg-wWcodqcsHwnyoQgCGO438tokpVecmtWbwAx3F8fWwVDfcGK2u_glt87NAwfG2F6yNDUu1z3blQdU4ilsxK-TB3E9RTu8ZCWC_cnBeAfXIvK3YCOdShASmoU4ybx48_3eXRZ3IzJkiPQxmzVy9LSXbllYjoUTBcFv/s728-rw-ft-e30/chrome-update.jpg)
Google on Wednesday rolled out fixes to address a new actively exploited zero-day in the Chrome browser. Tracked as CVE-2023-5217 , the high-severity vulnerability has been described as a heap-based buffer overflow in the VP8 compression format in libvpx, a free software video codec library from Google and the Alliance for Open Media (AOMedia). Exploitation of such buffer overflow flaws can result in program crashes or execution of arbitrary code, impacting its availability and integrity. Clément Lecigne of Google's Threat Analysis Group (TAG) has been credited with discovering and reporting the flaw on September 25, 2023, with fellow researcher Maddie Stone noting on X (formerly Twitter) that it has been abused by a commercial spyware vendor to target high-risk individuals. No additional details have been disclosed by the tech giant other than to acknowledge that it's "aware that an exploit for CVE-2023-5217 exists in the wild." The latest discovery brings to five