{"id":181752,"date":"2026-05-26T14:48:51","date_gmt":"2026-05-26T12:48:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium"},"modified":"2026-05-26T14:48:51","modified_gmt":"2026-05-26T12:48:51","slug":"google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","title":{"rendered":"Google a dezv\u0103luit accidental detalii despre o vulnerabilitate nerezolvat\u0103 \u00een Chromium.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Google a deschis din \u00eent\u00e2mplare accesul public la un raport (copie public\u0103), care con\u021bine o explica\u021bie detaliat\u0103 \u0219i un exemplu de exploit pentru o vulnerabilitate, care nu a fost \u00eenc\u0103 corectat\u0103 \u00een motorul Chromium. Vulnerabilitatea a fost recunoscut\u0103 ca fiind periculoas\u0103, iar cercet\u0103torului care a descoperit problema i-a fost oferit un premiu de $1000. Informa\u021bia despre problem\u0103 a fost trimis\u0103 \u00eenc\u0103 din 2022 \u0219i de atunci a fost periodic discutat\u0103, dar nu a fost finalizat\u0103, discu\u021bia despre corectarea acesteia (era necesar\u0103 implementarea unor limite noi pentru desc\u0103rc\u0103rile continue). \u00cen una dintre aceste discu\u021bii, dezvoltatorii au crezut din gre\u0219eal\u0103 c\u0103 vulnerabilitatea a fost corectat\u0103 \u0219i au deschis accesul public la informa\u021bii, de\u0219i problema a r\u0103mas nerezolvat\u0103.<\/p>\n

Vulnerabilitatea permite men\u021binerea execu\u021biei unui handler JavaScript \u00een fundal (Service Worker) chiar \u0219i dup\u0103 \u00eenchiderea ferestrei browser-ului, oferind atacatorului posibilitatea de a organiza un control constant asupra browser-ului, cu capacitatea de a desc\u0103rca \u0219i executa, \u00een orice moment, codul s\u0103u JavaScript \u00een contextul paginii sale. Scenariul atacului const\u0103 \u00een faptul c\u0103 atacatorul poate reu\u0219i s\u0103 deschid\u0103 pagina sa \u00eentr-o versiune a browser-ului care nu con\u021bine vulnerabilit\u0103\u021bi, dup\u0103 care a\u0219teapt\u0103 apari\u021bia unei vulnerabilit\u0103\u021bi grave \u00een browser \u0219i organizeaz\u0103 execu\u021bia exploit-ului f\u0103r\u0103 a necesita redeschiderea paginii de c\u0103tre utilizator. Esen\u021ba metodei const\u0103 \u00een crearea unei pagini cu un Service Worker, care realizeaz\u0103 o opera\u021biune de desc\u0103rcare a datelor, care nu este niciodat\u0103 \u00eentrerupt\u0103. <\/p>\n

Conform cercet\u0103torului care a descoperit problema, vulnerabilitatea poate fi folosit\u0103 pentru a crea un botnet din browsere, utilizatorii c\u0103rora nu suspecteaz\u0103 c\u0103, odat\u0103 fixat, atacatorul poate executa de la distan\u021b\u0103 cod JavaScript pe dispozitivul lor f\u0103r\u0103 a efectua ac\u021biuni din partea lor. Un astfel de botnet, \u0219i f\u0103r\u0103 exploatarea altor vulnerabilit\u0103\u021bi, poate fi folosit pentru a organiza atacuri DDoS \u0219i pentru a procesa trafic mali\u021bios prin sistemele victimelor. Problema afecteaz\u0103 toate browserele pe motorul Chromium.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0442\u0447\u0451\u0442\u0443 (\u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 $1000. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 2022 \u0433\u043e\u0434\u0443 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043d\u0435 \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0434\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181752","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google a dezv\u0103luit din \u00eent\u00e2mplare detalii despre o vulnerabilitate nerezolvat\u0103 \u00een Chromium | ProHoster","description":"Compania Google a deschis din \u00eent\u00e2mplare accesul public la un raport (copie public\u0103), care con\u021bine o explica\u021bie detaliat\u0103 \u0219i un exemplu de exploit pentru o vulnerabilitate, care nu a fost \u00eenc\u0103 corectat\u0103 \u00een motorul Chromium.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chromium | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0442\u0447\u0451\u0442\u0443 (\u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-26T12:48:51+00:00","article:modified_time":"2026-05-26T12:48:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181752","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=181752"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181752\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=181752"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=181752"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=181752"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}