It affects Chrome running on Windows, Mac, and Linux systems and has already been exploited in the wild according to Google. This vulnerability, tracked as CVE-2023-4863, is caused by a WebP heap buffer overflow weakness.
Google has released an emergency security update to address a critical vulnerability found in Chrome. - v1.2 - New information regarding the new critical vulnerability CVE-2023-5217.- v1.1 - Additional information related to impacted browsers.