Google researchers have patched two zero-days in Chrome that are being actively exploited in the wild.
Google has released an update for the Chrome web browser to fix seven high-severity vulnerabilities in its popular web browser, two of which are being actively exploited in the wild. “Google is aware that exploits for CVE-2021-38000 and CVE-2021-38003 exist in the wild,” said Google as it notified users of the updated release in the Stable channel. Both of the exploited vulnerabilities were caught by Google researchers, CVE-2021-38000 by Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group, and CVE-2021-38003 by Lecigne.
