Chrome update 91.0.4472.164 fixing 0-day vulnerability

Google has released Chrome update 91.0.4472.164, which fixes 8 vulnerabilities, including CVE-2021-30563, which is already used by attackers in exploits (0-day). Details have not yet been disclosed, it is only known that the vulnerability is caused by incorrect handling of types (Type Confusion) in the V8 JavaScript engine.

Other vulnerabilities include: three problems with memory access after freeing (Use after free) in V8, Blink XSLT and WebSerial; another problem with type handling (Type Confusion) in V8; Buffer overflows in ANGLE and WebXR.

Source: opennet.ru

Add a comment