Dangerous Google Chrome Zero-Day Allows Sandbox Escape

Google issued an emergency Chrome update (124.0.6367.207) to patch CVE-2024-4761, a high-severity out-of-bounds write in the V8 engine with exploit code available in the wild that can enable sandbox escapes and subsequent data theft or malware deployment; the report also notes a recently patched use-after-free (CVE-2024-4671), a trend of multiple Chrome zero-days this year, and urges immediate updates and mitigations.