Google Chrome gets a second security patch for a serious zero-day bug in two weeks

Google has started rolling out a new security update for its Chrome browser on the desktop. The new patch includes a total of 10 bug fixes in the browser, including a zero-day vulnerability – another spotted by Google’s Threat Analysis Group (TAG) that tracks threat actors over the past two weeks. As always, Google states that the details and links to the bug will not appear until most Chrome users have installed the update and that the vulnerabilities have also been fixed in any related third-party libraries. The zero-day vulnerability refers to a recently discovered software security flaw that could have already been exploited by hackers.

The Google Chrome security patch version 86.0.4240.183 is being released for systems running on Windows, Mac and Linux. In google Blog published The Chrome update on November 2 stated that it knows of reports that exploit zero-day vulnerabilities specifically identified as CVE-2020-16009. The update’s changelog only mentions a passing mention that the zero-day bug was in V8 – an open-source JavaScript engine designed for Google Chrome and also used by other Chromium browsers, such as Microsoft Edge And opera.

Zero-day issue that is the latest patch fixes To be second The last two weeks and the fourth in the last 12 months. Google last released a security patch on October 20 to fix CVE-2020-15999 – an actively exploited memory corruption bug in the FreeType font rendering library within Chrome. A few days after releasing a security patch to fix this, Google revealed on October 30 that zero-day exploits CVE-2020-15999 in conjunction with Windows identified as CVE-2020-17087 was going. When malicious code was being executed inside Google Chrome, Windows was extending the privileges of the code to attack the zero-day Windows OS. Ben Hawkes, technical lead at Google’s Project Zero, an elite team of bug hunters, says Microsoft is Expected to be released A security patch on November 10 to fix their security flaws.

Although Google’s TAG did not state that if the two bugs were being exploited by actors with the same threat, it confirms that the attackers’ motive was related to the US presidential elections.

Is the Mi Notebook 14 Series the Cheapest Laptop Range for India? We discussed it Of class, Our weekly technology podcast, which you can subscribe through Apple Podcast or RSS, Download episode, Or simply hit the play button below.