Google patches third exploited Chrome zero-day in a week

Google released an emergency Chrome update (125.0.6422.60/.61) to patch CVE-2024-4947, a high-severity type confusion flaw in the V8 JavaScript engine that is reported to be actively exploited in targeted attacks; the advisory notes this is the seventh Chrome zero-day fixed in 2024 and lists several other recently exploited vulnerabilities, while updates are rolling out to users and Microsoft is working on an Edge fix.