Google Chrome browser releases emergency security patch to fix vulnerability that can steal Bitcoin private keys and other information.
On April 17th, BlockBeats News reported that Google recently discovered a serious security vulnerability in the Chrome browser that has been exploited by hackers, potentially causing damage to users' data and computers. To address this issue, Google has urgently released a security update version 112.0.5615.121 and recommends that all Chrome users install it as soon as possible.
This vulnerability, named CVE-2023-2033, is a type confusion vulnerability that appears in the V8 JavaScript engine used by the Chrome browser. Simply put, a type confusion vulnerability is a bug that allows incorrect type access to memory, resulting in out-of-bounds read and write of memory. The danger of this vulnerability is that hackers can create a malicious HTML page to execute arbitrary code using heap memory corruption. Some users have pointed out that the harm caused includes but is not limited to stealing Bitcoin private keys, stealing sensitive files such as contacts and photo albums.
Generally, Chrome browser will automatically update, but users can also manually check if they have installed the latest version. Users can click the three-dot menu in the upper right corner of the Chrome browser, select "Help", and then select "About Chrome" to view their version number. In addition, if users use Chrome kernel-based browsers such as Microsoft Edge, Cheetah, and 360, they also need to upgrade to the latest version to avoid attacks.