It includes 10 patches, one of which refers to a zero-day vulnerability that might have already affected users. According to the release notes:
How is the Chrome browser impacted?
As mentioned, one of the patches refers to Inappropriate implementation in V8, for CVE-2020-16009. (V8 s a Chrome engine handling the JavaScript code.) This comes only a few days after one of Google’s Project Zero technical leads revealed a Windows kernel bug that attackers could use for sandbox escape. This second vulnerability has been tested on Windows 10 systems, however it’s presumably been affecting Windows 7 OS and later. More technical details on both issues can be found in the mentioned resources.
How can users avoid such vulnerabilities?
For regular users, such vulnerabilities can be used by attackers to execute malicious codes inside the Chrome browser. Google didn’t expand on the details of the mentioned issues, and they didn’t offer solutions for users either. On the other hand, it’s mentioned that a patch for the issues will be released on November 10th. Until then, users are expected to make sure that their Chromium browsers are thoroughly updated. The browser can be updated by going to the menu, hitting Settings > About Chrome. Have you noticed any unusual behavior with your Chrome browser lately? Share your thoughts on this topic wit us using the comments section below.
Name *
Email *
Commenting as . Not you?
Save information for future comments
Comment
Δ
