{"id":181752,"date":"2026-05-26T14:48:51","date_gmt":"2026-05-26T12:48:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium"},"modified":"2026-05-26T14:48:51","modified_gmt":"2026-05-26T12:48:51","slug":"google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","title":{"rendered":"Google paljastas kogemata detailid lahendamata haavatavusest Chromiumis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google avas ekslikult juurdep\u00e4\u00e4su raportile (avalik koopia), mis sisaldab \u00fcksikasjalikku seletust ja n\u00e4idet haavatavuse ekspluateerimise kohta, mis pole veel Chromiumi mootoris parandatud. Haavatavus on tunnustatud ohtlikuks ning probleemide avastamise eest tehti uurijale $1000 tasu. Probleemiga seotud teave saadeti juba 2022. aastal ning sellest ajast alates on see perioodiliselt t\u00f5statatud, kuid pole saanud lahendust, arutelu selle parandamise \u00fcle (vajalikud olid uued piirangud pidevale laadimisele). \u00dches sellises arutelus pidasid arendajad ekslikult haavatavust parandatuks ja avasid juurdep\u00e4\u00e4su teabele, kuigi probleem j\u00e4i lahendamata.<\/p>\n

Haavatavus v\u00f5imaldab j\u00e4tkata taustal t\u00f6\u00f6tava JavaScripti t\u00f6\u00f6tleja (Service Worker) tegevust isegi p\u00e4rast brauseriakna sulgemist, mis annab r\u00fcndajale v\u00f5imaluse p\u00fcsivalt kontrollida brauserit, laadides ja k\u00e4ivitades igal hetkel oma JavaScripti koodi oma lehe kontekstis. R\u00fcnnakuskeem seisneb selles, et r\u00fcndaja v\u00f5ib saavutada oma lehe avamise brauseri versioonis, mis ei sisalda haavatavusi, ning seej\u00e4rel oodata, kuni brauseris tuvastatakse t\u00f5sine haavatavus, ja korraldada ekspluateerimise teostamine ilma, et kasutaja peaks uuesti avama r\u00fcndaja lehte. Meetodi olemus seisneb lehe loomises koos Service Workeriga, mis teostab andmete laadimist, mis ei katke kunagi. <\/p>\n

Probleemi avastanud uurija arvates v\u00f5ib haavatavust kasutada botneti loomiseks brauseritest, mille kasutajad ei kahtlusta, et r\u00fcndaja, kes on juba asemele kinnitunud, suudab kaugelt k\u00e4ivitada JavaScripti koodi nende seadmel, tegemata nende poolt mitte mingisuguseid toiminguid. Sellist botnet'i saab kasutada DDoS-r\u00fcnnakute korraldamiseks ja pahatahtliku liikluse suunamiseks kannatajate s\u00fcsteemide kaudu, isegi ilma teiste haavatavuste ekspluateerimiseta. Probleem m\u00f5jutab k\u00f5iki Chromiumi mootoriga brausereid.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0442\u0447\u0451\u0442\u0443 (\u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 $1000. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 2022 \u0433\u043e\u0434\u0443 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043d\u0435 \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0434\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181752","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google avas ekslikult detailsed andmed parandamata haavatavuse kohta Chromiumis | ProHoster","description":"Google avas ekslikult juurdep\u00e4\u00e4su raportile (avalik koopia), mis sisaldab \u00fcksikasjalikku seletust ja n\u00e4idet haavatavuse ekspluateerimise kohta, mis pole veel Chromiumi mootoris parandatud. Haavatavus on tunnustatud ohtlikuks ning probleemide avastamise eest tehti uurijale $1000 tasu. Probleemiga seotud teave saadeti juba 2022. aastal ja sellest ajast alates on see perioodiliselt t\u00f5statatud, kuid pole saanud lahendust.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chromium | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0442\u0447\u0451\u0442\u0443 (\u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 $1000. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 2022 \u0433\u043e\u0434\u0443 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043d\u0435 \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0434\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-26T12:48:51+00:00","article:modified_time":"2026-05-26T12:48:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181752","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=181752"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181752\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=181752"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=181752"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=181752"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}