Open Nav
Sign Up

New Chrome Zero-Day Vulnerability (CVE-2023-7024)

Chrome Zero-Day Vulnerability

Bar Refael

December 26, 2023

We at OP Innovate would like to bring to your immediate attention a critical security update regarding a newly identified vulnerability in the Google Chrome browser, referenced as CVE-2023-7024. This vulnerability has been actively exploited in the wild and demands urgent action.

Key Points of the Vulnerability:

  • Vulnerability Description: CVE-2023-7024 is a high-severity heap buffer overflow issue identified within the WebRTC framework used in Chrome. This flaw could lead to program crashes or arbitrary code execution on affected systems.
  • Discovery: The vulnerability was discovered and reported by Clément Lecigne and Vlad Stolyarov of Google’s Threat Analysis Group (TAG).
  • Exploitation in the Wild: Google has confirmed that this vulnerability has been actively exploited, making it the eighth Chrome zero-day patched in 2023.
  • Other Zero-Day Vulnerabilities: This year has seen several other zero-day vulnerabilities in Chrome, including CVE-2023-6345, CVE-2023-5217, and others, each with its own risk factors.
  • Impact on Cybersecurity: With over 26,000 vulnerabilities disclosed in 2023, this adds to a growing list of security challenges faced by users and organizations.

Recommended Actions:

  • Immediate Update: Users are urged to update their Chrome browsers to the latest versions (120.0.6099.129/130 for Windows and 120.0.6099.129 for Mac and Linux) as soon as possible.
  • Chromium-Based Browsers: Users of browsers based on Chromium (like Microsoft Edge, Brave, Opera, and Vivaldi) should also apply updates when available.

Importance of Timely Action:

  • The rapid response to such vulnerabilities is crucial to safeguarding your digital infrastructure against potential exploits.
  • Delay in updating could leave systems exposed to cyber-attacks, including remote code execution and data breaches.

OP Innovate’s Commitment:

  • We are closely monitoring the situation and will provide further updates as more information becomes available.
  • Our team is dedicated to assisting our customers in navigating these cybersecurity challenges effectively.

Please do not hesitate to reach out to us for any assistance or clarification regarding this update. Your digital safety and security are our top priority.

Stay safe and updated

Resources highlights

Cisco IOS and IOS XE SNMP Zero-Day Actively Exploited (CVE-2025-20352)

Cisco disclosed CVE-2025-20352, a stack overflow in the SNMP subsystem of IOS and IOS XE, now confirmed as actively exploited in the wild. Attackers can…

Read more >

CVE-2025-20352

SolarWinds Web Help Desk (WHD) Unauthenticated RCE Patch-Bypass (CVE-2025-26399)

SolarWinds released Web Help Desk 12.8.7 Hotfix 1 to fix CVE-2025-26399, an unauthenticated remote code execution flaw in the AjaxProxy component caused by unsafe deserialization.…

Read more >

CVE-2025-26399

SonicWall Cloud Backup Compromise & Ongoing SSLVPN Exploitation

Threat actors gained access to MySonicWall cloud backup preference files after brute-forcing the vendor’s portal. These files, although encrypted, contain sensitive configuration data such as…

Read more >

sonicwall cloud

Ongoing Supply-Chain Attack Targeting npm Packages (aka “Shai-Hulud”)

Beginning on September 14, 2025, and accelerating over the next two days, attackers launched a large-scale supply-chain attack against the npm ecosystem. The campaign injected…

Read more >

Shai-Hulud

FBI Advisory: UNC6040/UNC6395 Targeting Salesforce Environments

The FBI has issued a FLASH advisory detailing activity from the threat groups UNC6040 and UNC6395, who are actively conducting data theft and extortion campaigns…

Read more >

salesforce fbi advisory

CVE-2024-40766: SonicWall SSL VPN Flaw Actively Exploited by Ransomware Threat Actors

CVE-2024-40766 is a critical improper access control vulnerability in SonicWall SonicOS management access/SSLVPN. Successful exploitation enables unauthorized access and can, in some cases, crash the…

Read more >

CVE-2024-40766
Under Cyber Attack?

Fill out the form and we will contact you immediately.