29 C
Jaipur
Saturday, October 31, 2020

Google Security Update Fixed High Severity Vulnerabilities in Chrome

Must read

Apple Announces Replacement Program for Faulty AirPods Pro Units

If your AirPods Pro earbuds are malfunctioning, there’s some good news for you. Apple has accepted that a small percentage of AirPods Pros sold...

iPhone 12 Pro Lets Blind Users Know How Close People or Objects Are Around Them

Apple has recently been adding a slew of new accessibility features to its iPhones. The company can alert users when the device hears sounds...

Tesla Model S Plaid Vs Lucid Air Dream Edition: Which One Is Better?

Today, we have two of the most awaited electric cars, Tesla Model S Plaid and Lucid Air Dream Edition, up for a head-to-head comparison....

Google released Chrome 80.0.3987.149, a stable channel update for Windows, Mac, and Linux with the fixes for several high severity vulnerabilities.

Google Addressed 13 “high” severity bugs that were reported by various external security researchers.

Due to the COVID-19 outbreak, Google announced to pass the upcoming releases of both Chrome and Chrome OS.

” Due to adjusted work schedules at this time, we are pausing upcoming Chrome and Chrome OS releases. Our primary objectives are to ensure they continue to be stable, secure and work reliably for anyone who depends on them.” Google said.

Google fixed several uses after free vulnerabilities in various chrome components such as WebGL, media, audio.

External security researcher David Manouchehri reports a use after free bug in WebGL ( CVE-2020-6422) and the researcher earned $8500 as a part of the Google Bug bounty reward program.

Another Use after Free vulnerability that affects the Media component (CVE-2020-6424) and Insufficient policy enforcement in extensions( CVE-2020-6425 ) vulnerabilities reported by Sergei Glazunov from Google Profect Zero team.

[$NA][1031142] High CVE-2020-6424: Use after free in media. Reported by Sergei Glazunov of Google Project Zero on 2019-12-05 

[$NA][1031670] High CVE-2020-6425: Insufficient policy enforcement in extensions. Reported by Sergei Glazunov of Google Project Zero on 2019-12-06

Man Yue Mo, a researcher from Semmle Security Research Team reported 4 “High” severity vulnerabilities that affected Chrome and all the 4 vulnerabilities were fixed in this update.

[$TBD][1055788] High CVE-2020-6427: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-02-25 

[$TBD][1057593] High CVE-2020-6428: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-02

[$TBD][1057627] High CVE-2020-6429: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-02

[$TBD][1059686] High CVE-2020-6449: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-09

How to Update

Steps to update for Windows, Mac, and Linux desktop users

  1. Open Chrome browser
  2. Head to Settings
  3. Expand help
  4. About Google Chrome
  5. The browser will process the update

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity and hacking news updates.

Source link

- Advertisement -

More articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest article

Apple Announces Replacement Program for Faulty AirPods Pro Units

If your AirPods Pro earbuds are malfunctioning, there’s some good news for you. Apple has accepted that a small percentage of AirPods Pros sold...

iPhone 12 Pro Lets Blind Users Know How Close People or Objects Are Around Them

Apple has recently been adding a slew of new accessibility features to its iPhones. The company can alert users when the device hears sounds...

Tesla Model S Plaid Vs Lucid Air Dream Edition: Which One Is Better?

Today, we have two of the most awaited electric cars, Tesla Model S Plaid and Lucid Air Dream Edition, up for a head-to-head comparison....

Apple Loses 10-Year Long Legal Battle, Will Pay $503 Million To VirnetX

A decade-long lawsuit between Apple and VirnetX has concluded with a Texas jury ordering Apple to pay the Nevada-based software company. Earlier this year,...