This comes just after the release of Chrome version 128, which also included a major fix for a zero-day vulnerability.

What was fixed in the browser?

Google has patched four critical vulnerabilities discovered by independent researchers and reported to developers in the latest Chrome 128 update. While none of these vulnerabilities have yet been exploited in real-world scenarios, the fact that they are labeled as “high-risk threats” speaks to the importance of the update.

• Among the vulnerabilities, two were related to “type confusion” in the V8 JavaScript engine and were described as follows: CVE-2024-7969 And CVE-2024-8194.
• The other two are buffer overflows in the Skia 2D graphics library, cataloged as follows: CVE-2024-8193 And CVE-2024-8198.

If the automatic update has not yet occurred, users are advised to manually update their Chrome browser.

While Google experts are quickly fixing these issues, other Chromium-based browsers such as Brave, Microsoft Edge, Opera, and Vivaldi are also expected to update their versions. Currently, these browsers run different versions of Chromium; some have just upgraded to Chromium 128, and others are still using older versions.

However, all of these browsers already have protection against the CVE-2024-7971 zero-day vulnerability, which was patched last week. Users are advised to be careful and update their browsers to avoid potential security risks.