{"id":181752,"date":"2026-05-26T14:48:51","date_gmt":"2026-05-26T12:48:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium"},"modified":"2026-05-26T14:48:51","modified_gmt":"2026-05-26T12:48:51","slug":"google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","title":{"rendered":"Google rast\u00ebsisht zbuloi detaje t\u00eb nj\u00eb dob\u00ebsie t\u00eb patreguar n\u00eb Chromium","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Google p\u00ebr fat t\u00eb keq ka hapur aksesi publik n\u00eb nj\u00eb raport (k\u00ebtu q\u00ebndron nj\u00eb kopje publike), q\u00eb p\u00ebrmban nj\u00eb shpjegim t\u00eb detajuar dhe nj\u00eb shembull eksploit p\u00ebr nj\u00eb vulnerabilitet, ende t\u00eb pa riparuar n\u00eb motorin Chromium. Vulnerabiliteti \u00ebsht\u00eb njohur si i rreziksh\u00ebm dhe k\u00ebrkuesi q\u00eb e zbuloi at\u00eb ka marr\u00eb nj\u00eb shp\u00ebrblim prej $1000. Informatat p\u00ebr k\u00ebt\u00eb problem u d\u00ebrguan q\u00eb n\u00eb vitin 2022 dhe nga at\u00ebher\u00eb jan\u00eb diskutuar hera-her\u00ebs, por nuk u finalizuan, debati p\u00ebr riparimin e tij (nevojitej implementimi i kufijve t\u00eb rinj p\u00ebr ngarkimet e vazhdueshme). N\u00eb nj\u00eb nga k\u00ebto diskutime, zhvilluesit gabimisht e konsideruan vulnerabilitetin t\u00eb riparuar dhe hap\u00ebn aksesi publik t\u00eb informacionit, ndon\u00ebse problemi mbeti i pazgjidhur.<\/p>\n

Vulnerabiliteti lejon vazhdimin e ekzekutimit t\u00eb nj\u00eb procesori JavaScript (Service Worker) n\u00eb sfond, edhe pasi dritarja e shfletuesit mbyllet, duke i dh\u00ebn\u00eb mund\u00ebsin\u00eb nj\u00eb sulmuesi t\u00eb organizoj\u00eb nj\u00eb kontroll t\u00eb vazhduesh\u00ebm mbi shfletuesin me mund\u00ebsin\u00eb e ngarkimit dhe ekzekutimit n\u00eb \u00e7do moment t\u00eb kodit t\u00eb tij JavaScript n\u00eb kontekstin e faqes s\u00eb tij. Skema e sulmit p\u00ebrfshin q\u00eb sulmuesi mund t\u00eb arrij\u00eb hapjen e faqes s\u00eb tij n\u00eb nj\u00eb version t\u00eb shfletuesit, q\u00eb nuk p\u00ebrmban vulnerabilitete, pas s\u00eb cil\u00ebs pret identifikimin e nj\u00eb vulnerabiliteti t\u00eb r\u00ebnd\u00eb n\u00eb shfletues dhe organizon ekzekutimin e eksploitit pa pasur nevoj\u00eb p\u00ebr hapjen p\u00ebrs\u00ebri nga p\u00ebrdoruesi t\u00eb faqes s\u00eb sulmuesit. Q\u00ebllimi i metod\u00ebs \u00ebsht\u00eb krijimi i nj\u00eb faqeje me nj\u00eb Service Worker, q\u00eb realizon nj\u00eb operacion ngarkimi t\u00eb t\u00eb dh\u00ebnave, i cili kurr\u00eb nuk nd\u00ebrpritet. <\/p>\n

Sipas mendimit t\u00eb k\u00ebrkuesit q\u00eb zbuloi problemin, vulnerabiliteti mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb krijuar nj\u00eb botnet nga shfletuesit, p\u00ebrdoruesit e t\u00eb cil\u00ebve nuk jan\u00eb n\u00eb dijeni se nj\u00eb her\u00eb duke u vendosur, sulmuesi mund t\u00eb ekzekutoj\u00eb p\u00ebrmbajtje JavaScript n\u00eb pajisjen e tyre pa veprime nga ana e tyre. Nj\u00eb botnet i till\u00eb, edhe pa shfryt\u00ebzimin e vulnerabiliteteve t\u00eb tjera, mund t\u00eb p\u00ebrdoret p\u00ebr organizimin e sulmeve DDoS dhe p\u00ebr t\u00eb b\u00ebr\u00eb proxy p\u00ebr trafikun e d\u00ebmsh\u00ebm p\u00ebrmes sistemeve t\u00eb viktimave. Problemi prek t\u00eb gjith\u00eb shfletuesit n\u00eb motorin Chromium.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0442\u0447\u0451\u0442\u0443 (\u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0438 \u0432\u044b\u044f\u0432\u0438\u0432\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0431\u044b\u043b\u043e \u0432\u044b\u043f\u043b\u0430\u0447\u0435\u043d\u043e \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435 \u0432 $1000. \u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0451 \u0432 2022 \u0433\u043e\u0434\u0443 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u043b\u043e\u0441\u044c, \u043d\u043e \u043d\u0435 \u0434\u043e\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0434\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181752","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google p\u00ebr fat t\u00eb keq ka zbuluar detajet e nj\u00eb vulnerabiliteti t\u00eb pa riparuar n\u00eb Chromium | ProHoster","description":"Kompania Google p\u00ebr fat t\u00eb keq ka hapur aksesi publik n\u00eb nj\u00eb raport (k\u00ebtu q\u00ebndron nj\u00eb kopje publike), q\u00eb p\u00ebrmban nj\u00eb shpjegim t\u00eb detajuar dhe nj\u00eb shembull eksploit p\u00ebr nj\u00eb vulnerabilitet, ende t\u00eb pa riparuar n\u00eb motorin Chromium.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0435\u0442\u0430\u043b\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Chromium | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0442\u0447\u0451\u0442\u0443 (\u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043f\u0438\u044f), \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u043c\u0443 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 Chromium.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-sluchajno-raskryl-detali-neispravlennoj-uyazvimosti-v-chromium","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-26T12:48:51+00:00","article:modified_time":"2026-05-26T12:48:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/181752","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=181752"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/181752\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=181752"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=181752"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=181752"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}