![]() ![]() ![]() "Access to bug details and links may be kept restricted until a majority of users are updated with a fix," Google adds. No details on attacks exploiting the zero-dayĮven though Google says that it "is aware of reports that an exploit for CVE-2020-16009 exists in the wild," the company did not provide any details regarding the threat actors behind these attacks. While buffer overflows generally lead to crashes, they can also be exploited by attackers to execute arbitrary code on systems running vulnerable software. The zero-day is described as a heap buffer overflow bug in V8, Google's open-source and C++ based high-performance WebAssembly and JavaScript engine. Microsoft disclosed on January 28th that a North Korean government-backed hacking group tracked as ZINC 'likely' used a Chrome browser exploit chain (with zero-day or patch gap exploits) to target vulnerability researchers. The vulnerability rated by Google as high severity is being tracked as CVE-2021-21148 and was reported by Mattias Buelens on January 24th, 2021. V8 vulnerability under active exploitation The Google Chrome web browser will then automatically check for the new update and install it when available. ![]() Windows, Mac, and Linux desktop users can upgrade to Chrome 88 by going to Settings -> Help -> About Google Chrome. This version is rolling out to the entire userbase during the next days/weeks. "Google is aware of reports that an exploit for CVE-2021-21148 exists in the wild," the Google Chrome .150 announcement reads. Google has addressed an actively exploited zero-day security vulnerability in the Chrome .150 version released today, February 4th, 2020, to the Stable desktop channel for Windows, Mac, and Linux users. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |