There are reports of malicious actors exploiting a Google Chrome vulnerability which allows corruption via specifically crafted webpages. Users should protect themselves by updating their Chrome-based browser to the latest version.
This vulnerability is exploited when someone visits a web page that has been constructed to take advantage of the vulnerability. This type of attack is typically initiated via phishing or spam email attacks which contain links to malicious sites.
Updating can be done by following the guidance on this page. If you are using a Secure Computing Mac or Windows system, which includes Dedicated Desktop Support, the patched version of Chrome was released to your system this morning. Like all Chrome patches, if you have Chrome open, you will need to restart Chrome for the patching process to complete. If you have questions about this vulnerability, please contact the IT Service Center at oithelp@colorado.edu or 303-735-4357.
Impacted Software
- Google Chrome versions prior to 128.0.6613.84
