A severe security vulnerability in the Google Chrome browser has prompted an urgent public notice from the National Information Technology Development Agency (NITDA).
The Agency claims that Google found this vulnerability, which has been assigned the code CVE-2024-797, and that cybercriminals are actively using it to target individuals online.
The V8 JavaScript engine in Chrome is the source of the vulnerability, which is categorized as a “type confusion” issue that affects how the browser handles JavaScript files. Memory corruption results from the browser’s incorrect interpretation of data types, which causes the vulnerability.
This, in turn, could allow attackers to run harmful programs on devices that have not yet been updated to the latest version of Chrome.
Read Also: NITDA set to develop Indigenous blockchain “Nigerium” to foster data sovereignty
NITDA through its Emergency Readiness and Response Team (CERRT) warns that the consequences of this vulnerability are severe, as attackers could potentially take full control of an affected system.
“The vulnerability enables attackers to potentially take full control of affected systems by exploiting memory corruption caused by the misinterpretation of data types.
“This could allow attackers to bypass security protocols and measures, execute malicious code, and even cause system crashes.
“The vulnerability is particularly dangerous because it can be triggered simply by visiting a malicious website,” NITDA stated.
In response to this threat, NITDA advises all Google Chrome users to immediately update their browsers to the latest version.
Read Also: As NITDA Signs With Organizers, GITEX Nigeria Berths
The recommended versions are 128.0.6613.84/.85 for Windows and macOS, and 128.0.6613.84 for Linux.
Users can check for updates by navigating to the Chrome menu, selecting “Help,” and then clicking on “About Google Chrome” to apply any available updates.
Moreover, users of Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, are also urged to apply the necessary updates as soon as they become available.
The agency emphasizes that timely updates are crucial to protecting against potential exploits and maintaining the security of personal and organizational systems.
