CVE-2023-3079

Update Google Chrome immediately to version 114.0.5735.110 or later as directed by CISA: "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable." Ensure automatic updates are enabled to receive future V8 security patches promptly.

Update all Chromium-based browsers and products that embed the V8 engine, including Microsoft Edge, Brave, Opera, and other Chromium derivatives. Additionally, apply security updates for affected Linux distributions (Fedora, Debian) and Couchbase Server as referenced in their respective advisories.

Implement browser isolation and sandboxing controls as interim mitigations. Enable site isolation in Chrome, restrict access to untrusted websites through web filtering or proxy solutions, and consider deploying browser isolation technology for high-risk users to contain potential exploitation within an isolated environment.

Monitor for indicators of compromise by reviewing endpoint detection logs for unusual browser process behavior, such as unexpected child processes spawned by Chrome, anomalous memory access patterns, or signs of sandbox escape. Check for any unauthorized downloads or lateral movement originating from browser processes.

Deploy content security policies and script controls to reduce the attack surface for type confusion vulnerabilities. Use enterprise browser management to disable JavaScript on untrusted sites where feasible, and implement network-level protections such as DNS filtering to block known malicious domains that may host exploit pages.