Follow
Google, Mozilla, Microsoft, and Brave have each issued critical security patches, reports Stack Diary. The patches address a vulnerability that an attacker could use to gain access to or run malicious code on your computer
https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/
update EVERYTHING - every app that has an update
Apple also released a security patch this week for what appears to be the same issue
https://support.apple.com/en-us/HT201222
though it references a different issue number on the NIST site.
no joke EVERY app
Stack Diary mentioned that Electron-based apps like encrypted-messaging app Signal and Bandisoft’s Honeyview have also released patches for the issue. Other apps, like Affinity, Gimp, LibreOffice, Telegram, many Android applications, and “cross-platform apps built with Flutter” are likewise affected, according to the site.