Google tau tsim ib qho kev hloov tshiab rau Chrome 89.0.4389.128, uas kho ob qhov tsis zoo (CVE-2021-21206, CVE-2021-21220), uas muaj kev siv dag zog ua haujlwm (0-hnub). Qhov tsis zoo CVE-2021-21220 tau siv los nyiag Chrome ntawm Pwn2Own 2021 kev sib tw.
Qhov kev siv ntawm qhov tsis zoo no yog ua los ntawm kev ua tiav ntawm qee txoj hauv kev ntawm WebAssembly code (qhov tsis zoo yog tshwm sim los ntawm kev ua yuam kev hauv WebAssembly virtual tshuab, uas tso cai rau koj sau lossis nyeem cov ntaub ntawv mus rau qhov chaw nyob hauv lub cim xeeb). Nws tau raug sau tseg tias qhov kev siv dag zog tsis tso cai rau ib tus dhau los ntawm kev sib cais sandbox thiab kev tawm tsam tag nrho yuav tsum muaj kev tshawb pom ntawm lwm qhov tsis zoo los tawm ntawm sandbox (xws li qhov tsis zoo no tau tshwm sim rau Windows ntawm Pwn2Own 2021 kev sib tw).
Ib qho piv txwv ntawm kev siv rau qhov teeb meem no tau luam tawm ntawm GitHub tom qab kev txhim kho tau ua rau V8 lub cav, tab sis tsis tau tos rau qhov browser hloov tshiab raws li nws tsim tawm (txawm tias qhov kev siv tsis tau luam tawm, cov neeg tawm tsam tuaj yeem rov tsim dua. nws raws li kev txheeb xyuas ntawm cov kev hloov pauv hauv V8 repository, uas tau tshwm sim dhau los vim qhov xwm txheej uas qhov kev txhim kho hauv V8 twb tau tshaj tawm, tab sis cov khoom raws li nws tseem tsis tau hloov kho).
Tsis tas li ntawd, koj tuaj yeem nco ntsoov qhov hloov pauv hauv lub sijhawm tshaj tawm rau kev tso tawm Chrome 90 rau Linux, Windows thiab macOS. Qhov kev tso tawm no tau teem sijhawm rau lub Plaub Hlis 13, tab sis tsis tau tshaj tawm nag hmo, thiab tsuas yog cov version rau Android tau tso tawm. Ib qho ntxiv beta tso tawm ntawm Chrome 90 tau tsim hnub no. Hnub tso tawm tshiab tsis tau tshaj tawm.
Tau qhov twg los: opennet.ru