I-Google idale ukuhlaziywa kwi-Chrome 93.0.4577.82, elungisa ubuthathaka be-11, kubandakanywa iingxaki ezimbini esele zisetyenziswe ngabahlaseli kwi-exploits (0-day). Iinkcukacha azikachazwa, siyazi kuphela ukuba ubuthathaka bokuqala (CVE-2021-30632) kubangelwa impazamo ekhokelela ekubhaleni ngaphandle kwemida kwi-injini ye-V8 JavaScript, kunye nengxaki yesibini (CVE-2021-) 30633) ikhona ekuphunyezweni kwe-Indexed DB API kwaye ihambelana nokufikelela kwindawo yememori emva kokuba ikhululiwe (ukusetyenziswa emva kokukhululwa).
Obunye ubuthathaka bubandakanya: iingxaki ezimbini ezibangelwa kukufikelela kwimemori emva kokuba ikhululwe kuKhetho kunye neeMvume ze-API; ukuphathwa ngendlela engalunganga kweentlobo (Udidi Lwesiphithiphithi) kwi-injini ye-Blink; Isithinteli siphuphuma kwi-ANGLE (Phantse i-Native Graphics Layer Engine) umaleko. Bonke ubuthathaka bufumene iwonga eliyingozi. Akukho zingxaki zibalulekileyo ezichongiweyo ezivumela umntu ukuba adlule kuwo onke amanqanaba okukhusela isiphequluli kwaye enze ikhowudi kwisistim ngaphandle kwendawo yebhokisi yesanti.
umthombo: opennet.ru