Google has released an emergency update for the Chrome browser to patch an actively-exploited high-severity zero-day vulnerability. The flaw, tracked as CVE-2023-7024, is a heap-based buffer overflow vulnerability in WebRTC allowing for potential exploitation targeting the Chrome desktop versions of Windows, Linux, and macOS systems. WebRTC is an open-source framework using real-time communication (RTC) for the web via JavaScript APIs. Successful exploitation could allow attackers to cause program crashes and execute arbitrary code with the privileges of the user. This vulnerability was identified and reported by Google’s own Threat Analysis Group (TAG). Currently, the technical information regarding vulnerability and exploit are being withheld to allow as many Chrome and Chromium users as possible to patch their vulnerable browsers. Google’s security advisory states that they are aware of an exploit for CVE-2023-7024 existing in the wild. CTIX analysts recommend that all users ensure their browsers are running the latest version to prevent exploitation.