While you were out trick or treating on Halloween night, Google engineers released a warning about a new Chrome security flaw.
- I agreed to try the google chrome extension, app insisted other files be downloaded, how running in background of my PC, with!@6 files of hola, and when i browse and use hola extension it keeps listing app is out of service and check my internet connection!
- Google Chrome™的免費下載管理器是一個應用程序，可讓您使用多線程技術下載大文件。 在我們的網站上，您可以輕鬆地將網絡上的任何文件下載並保存到PC上或直接保存在Google雲端硬盤中，而無需將其保存到桌面上。.
專為 Chrome 建置 – 不需要安裝 Office 就能使用 Word、Excel、PowerPoint、OneNote 與 Sway Online。 自信地進行創作 – 使用熟悉的格式設定與版面配置選項來完整表達您的想法。. Securely access your computer from your phone, tablet, or another computer. It's fast, simple, and free.
On Oct. 31, Google regarding two recently discovered vulnerabilities. The search giant has confirmed that a zero-day exploit exists for one of these security issues.
A zero-day exploit is basically when a nefarious party discovers a bug they can use for a cyber attack before the original developer can issue a fix.
Google released a security update to fix the problem that will roll out automatically to all users in the coming days and weeks. Users can manually update Google Chrome immediately by going to the “About Google Chrome” section in the menu bar.
“This version addresses vulnerabilities that an attacker could exploit to take control of an affected system,” said a released by the U.S. Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA).
Google hasn’t divulged many details about the flaws, which the company says is for security purposes.
“Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” reads the security alert from Google. “We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.”
However, here’s what we know so far. The two vulnerabilities, CVE-2019-13720 and CVE-2019-13721, are considered “use-after-free” flaws. This is when an application attempts to reference previously used memory after it’s been freed or deleted. When this occurs, bad actors can exploit the memory corruption to execute malicious code.
One of the two Chrome bugs affect the PDFium library, which generates PDFs. The other, which has a zero-day exploit in the wild, involves Chrome’s audio component.
The was made by Anton Ivanov and Alexey Kulaev, two researchers from the cybersecurity firm Kaspersky.
Download Google Chrome For Pc
Google Chrome’s last major security vulnerability involving a zero-day exploit occurred just . The company pushed out an update in March after a memory management error involving FileReader was discovered.