• Latest
  • Trending
  • All

Google patches actively exploited Chrome browser zero-day vulnerability

2 months ago

Manmohan Singh Stable, Best Possible Care Being Provided: Health Minister

3 mins ago

US will boost ‘Do Not Travel’ COVID-19 advisory to 80pct of countries worldwide

5 mins ago

Indonesian edtech CoLearn gets $10M Series A led by Alpha Wave Incubation and GSV Ventures – TechCrunch

19 mins ago

Jimmy Carter Leads Tributes to Walter Mondale

20 mins ago

Fire Destroys Historic Sacred Heart Of Jesus Church In Northeast Minneapolis

22 mins ago

Abdullah bin Zayed, Pakistan FM review consolidating cooperation

24 mins ago

World First: Researchers Create Human-Monkey Embryos

24 mins ago

As Cases Surge Exponentially, Delhi Police Ferrying Patients to Hospitals, Arranging Oxygen and Taking Dead to Crematoriums

28 mins ago

US warns against travel to 80% of world due to coronavirus

34 mins ago

‘Life doesn’t work on some slow gradual ascent’: Ethan Hawke

42 mins ago

How S’pore’s Immigration-Friendly Labour Market Protected Local Jobs During The Pandemic

49 mins ago

Covid-19: India announces vaccination for all above age of 18

1 hour ago
Tuesday, April 20, 2021
  • Home
  • News
    • USA
    • INDIA
    • CANADA
    • EUROPE
    • ASIA PACIFIC
    • MIDDLE EAST
  • Business
  • Politics
  • Health
  • Sports
  • TECH
  • Entertainment
  • Travel
  • Lifestyle
  • Covid-19
No Result
View All Result
BM Global News
  • Home
  • News
    • USA
    • INDIA
    • CANADA
    • EUROPE
    • ASIA PACIFIC
    • MIDDLE EAST
  • Business
  • Politics
  • Health
  • Sports
  • TECH
  • Entertainment
  • Travel
  • Lifestyle
  • Covid-19
BM Global News
No Result
View All Result
Home Technology

Google patches actively exploited Chrome browser zero-day vulnerability

by BM Global News Admin
2 months ago
in Technology
0
Share on FacebookShare on TwitterShare on EMail


Google has warned of reports that a zero-day vulnerability in the Chrome browser is being actively exploited in the wild.

The vulnerability, tracked as CVE-2021-21166, was reported by Alison Huffman from the Microsoft Browser Vulnerability Research team on February 11 and is described as an “object lifecycle issue in audio.” 

Google has labeled the vulnerability as a “high” severity security flaw and has fixed the issue in the latest Chrome release.  

Alongside CVE-2021-21166, Huffman also recently reported another high-severity bug, CVE-2021-21165, another object lifestyle issue in audio problem, and CVE-2021-21163, an insufficient data validation issue in Reader Mode. 

The tech giant has not revealed further details concerning how CVE-2021-21166 is being exploited, or by whom. 

Google’s announcement, published on Tuesday, also marked the release of Chrome 89 to the stable desktop channel for Windows, Mac, and Linux machines, which is currently rolling out. Users should upgrade to Chrome 89.0.4389.72 once available. 

The Chrome 89.0.4389.72 release also contains a swathe of other security fixes and browser improvements. In total, 47 bugs have been patched, including a high-severity heap buffer overflow in TabStrip (CVE-2021-21159), another heap buffer overflow in WebAudio (CVE-2021-21160), and a use-after-free issue in WebRTC (CVE-2021-21162). A total of eight vulnerabilities are considered high-severity.

“Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Google added. “We will also retain restrictions if the bug exists in a third-party library that other projects similarly depend on, but haven’t yet fixed.”

On February 4, Google pushed out a fix for CVE-2021-21148, a heap buffer overflow in the Chrome V8 JavaScript engine which is also being actively exploited. This high-severity security flaw was reported by Mattias Buelens on January 24. 

This week, Microsoft released urgent updates for four zero-day vulnerabilities in Exchange Server. Microsoft says the bugs are being exploited in “limited targeted attacks” and is urging users to update as quickly as possible. 

Previous and related coverage


Have a tip? Get in touch securely via WhatsApp | Signal at +447713 025 499, or over at Keybase: charlie0




Source link

Tags: ActivelyBrowserChromeExploitedGooglelatest updatespatchestechtech newstech updatestechnologytechnology newsvulnerabilityZeroDay
Share197Tweet123Send

Related Posts

Indonesian edtech CoLearn gets $10M Series A led by Alpha Wave Incubation and GSV Ventures – TechCrunch

by BM Global News Admin
19 mins ago
0

A Zoom screenshot with CoLearn’s founding team: Marc Irawan, Abhay Saboo and Sandeep Devaram Indonesian startup CoLearn started as...

UK cites national security concerns to look into Nvidia purchase of Arm

by BM Global News Admin
3 hours ago
0

The UK Secretary of State for Digital, Culture, Media and Sport Oliver Dowden issued an intervention notice on Monday...

Microsoft’s Edge browser is getting a Performance Mode to optimize resource usage

by BM Global News Admin
5 hours ago
0

In context: Microsoft's new Edge browser has been scooping up users like there's no tomorrow. Though it's still nowhere...

Memorial Day TV sales 2021: deals from Best Buy, Walmart, and Amazon

by BM Global News Admin
6 hours ago
0

The 2021 Memorial Day TV sales event will be here before you know, so we've created this guide to...

Load More

Latest Updates

Coronavirus: Merkel warns of third virus wave as Germany weighs ending lockdown | Al Arabiya English

2 months ago

Dubai expat announces $100,000 reward to find wife missing in Maldives

2 months ago

QAnon supporters think Capitol shooting victim Ashli Babbitt is still alive

3 months ago

Massive power outage in Pakistan

3 months ago

US airstrikes pound Iran-backed militias south of Iraq’s Baghdad: Reports

3 months ago

Pink lake discovered in UAE; drone photos go viral

3 months ago
Load More
BM Global News

Get the latest news and follow the coverage of breaking news, local news, national, politics, and more from the world's top trusted sources.

  • Disclaimer
  • DMCA
  • Privacy Policy
  • Cookie Privacy Policy
  • Terms and Conditions
  • Contact us

Copyright © 2020 BM Global News.

No Result
View All Result
  • Home
  • News
    • USA
    • INDIA
    • CANADA
    • EUROPE
    • ASIA PACIFIC
    • MIDDLE EAST
  • Business
  • Politics
  • Health
  • Sports
  • TECH
  • Entertainment
  • Travel
  • Lifestyle
  • Covid-19

Copyright © 2020 BM Global News.