The fixed versions of Chrome 128 will roll out over the coming days and weeks, said Google.
A new deep-dive investigation into the known UNC3886 gives insight into how the China-linked threat actor “operates in a sophisticated, cautious, and evasive nature.”
The flaw is being exploited in the wild, and no patches will be available until Sunday.
Google reported that 97 flaws were exploited in the wild in 2023, up 50 percent from the number of zero-day attacks recorded in 2022.
Microsoft fixed the flaw as part of its regularly scheduled updates on Tuesday.