Google fixes ninth Chrome zero-day exploited in attacks this year

Google released an emergency Chrome update to patch CVE-2024-7971, a high-severity type-confusion zero-day in the V8 JavaScript engine that Microsoft researchers reported and which Google says is being exploited in the wild; fixes are available in Chrome 128.0.6613.84/.85 for desktop and users are advised to update/relaunch immediately. The advisory provides limited exploitation details and notes Google may restrict disclosure until most users are updated; the report also enumerates other Chrome zero-days patched earlier in 2024.