Urgent Chrome Update Patches Multiple Zero-Day Vulnerabilities

Google has released an emergency patch for a zero-day flaw in Chrome that is already being exploited in real-life attacks. The flaw, tracked as CVE-2023-6345, is an integer overflow issue in the Skia graphics library. Google also fixed six other high-impact vulnerabilities in Chrome. In addition, Mozilla Firefox fixed 10 vulnerabilities, including out-of-bound memory access and use-after-free issues. Google's November Android Security Bulletin addressed several vulnerabilities, while Microsoft's Patch Tuesday fixed 59 vulnerabilities, two of which were already being exploited. Cisco and Atlassian also released patches for security flaws, including a critical vulnerability in Cisco Firepower Management Center Software and a serious flaw in Atlassian's Confluence Data Center and Server. SAP also released its November Security Patch Day, fixing three new flaws.