Zosintha za Chrome 91.0.4472.101 zokhala ndi zovuta zamasiku 0

Google yapanga zosintha za Chrome 91.0.4472.101, zomwe zimakonza zovuta 14, kuphatikiza vuto la CVE-2021-30551, lomwe limagwiritsidwa ntchito kale ndi omwe akuukira muzochita (0-day). Tsatanetsatane sanaululidwe, timangodziwa kuti kusatetezekako kumayamba chifukwa cha kusagwira bwino kwamtundu (Type Confusion) mu injini ya V8 JavaScript.

Mtundu watsopanowu umachotsanso chiwopsezo china chowopsa CVE-2021-30544, chomwe chimayamba chifukwa cha kukumbukira kukumbukira mutatha kumasula (kugwiritsanso ntchito kwaulere) mu cache yosinthira (BFCache, Back-forward cache), yomwe imagwiritsidwa ntchito pakusintha pompopompo mukamagwiritsa ntchito "Back". ” mabatani " ndi "Patsogolo" kapena poyenda masamba omwe adawonedwa kale atsambali. Vutoli lapatsidwa gawo lalikulu la ngozi, i.e. Zikusonyezedwa kuti kusatetezeka kumakupatsani mwayi wolambalala magawo onse achitetezo cha asakatuli ndipo ndikokwanira kuti mupereke kachidindo pamakina omwe ali kunja kwa sandbox.

Source: opennet.ru

Kuwonjezera ndemanga