Affected Systems
Google Chrome versions prior to 153.0.8010.36 (Windows/Linux) and 153.0.8010.37 (Mac) on all desktop platforms. Vulnerability exists in V8 JavaScript/WebAssembly engine.
Exploitation Status
Actively exploited in the wild. Exploit reported by Seoul National University researcher. No public details on attack campaigns or threat actors disclosed yet.
Business Impact
Remote code execution within Chrome sandbox via malicious HTML pages. Out-of-bounds write in V8 engine enables arbitrary code execution, heap corruption, potential information disclosure, and browser crashes. This is the seventh Chrome zero-day exploited in 2024, indicating sustained targeting of Chrome users. Patch rollout may take days to weeks globally, leaving exposure window for unpatched systems.
Urgency
🔴 Immediate
Recommended Actions
- Update Chrome immediately to version 153.0.8010.36 (Windows/Linux) or 153.0.8010.37 (Mac) via chrome://settings/help or allow automatic update on next browser restart
- Verify Chrome version across enterprise endpoints using endpoint management tools or browser management policies
- Monitor web proxy logs and endpoint detection tools for suspicious JavaScript execution patterns or V8 engine crashes
- Consider blocking access to untrusted websites via web filtering until patch deployment is confirmed across all systems
- Review Chrome enterprise update policies to ensure timely automatic updates are enabled for all managed browsers