Urgent Security Updates Released for Popular Browsers

Google has released an emergency security update for Chrome users to address a zero-day threat affecting the WebP image format, just days after Apple released iOS 16.6.1 to protect against a critical zero-day exploit involving ImageIO. The vulnerability, known as CVE-2023-4863, is a heap buffer overflow issue that could potentially enable a zero-click attack when visiting a website with a malicious image. Other web browsers, including Brave, Edge, Firefox, Opera, and Vivaldi, have also issued updates to patch the WebP vulnerability. The connection between this vulnerability and the BLASTPASS exploit chain, which targeted iPhones, is still unconfirmed. Users are advised to update their browsers and check for security updates on other Chromium-powered browsers as well.