CVE-2021-37976 and CVE-2021-37975 - September 30th, 2021Īs Google is now pushing out Chrome updates to fix zero-days as they are reported, it is strongly advised that users do not block updates and install new versions as they become available. The other thirteen zero-days patched this year are listed below: With these fixes, Google has patched 15 Chrome zero-day vulnerabilities since the beginning of 2021. However, as Google discovered the vulnerabilities, we may learn more in future reports by Google TAG or Project Zero.Īs these two vulnerabilities have been used in attacks, it is suggested that all Chrome users perform a manual upgrade or restart their browser to install the latest version. This vulnerability was discovered by Lecigne as well and reported on October 24th.Īt this time, Google or the researchers have not provided further details regarding how threat actors used the vulnerabilities in attacks. The second zero-day, tracked as CVE-2021-38003, is a High severity "Inappropriate implementation" bug in the Chrome V8 JavaScript engine. This vulnerability was discovered by Clement Lecigne, Neel Mehta, and Maddie Stone of Google Threat Analysis Group on September 15th, 2021. In the listed plugins, find the plugin named Google Update and press the Disable option under it. Open Google Chrome and at the URL Address Bar, type: chrome://plugins & press Enter. 
The first zero-day, tracked as CVE-2021-38000, is described as an "Insufficient validation of untrusted input in Intents" and was assigned a High severity level. Method 2: Disable Chrome Update through Chrome. This Chrome release fixes a total of seven vulnerabilities, with two being zero-days that are known to have been exploited in the wild. Google Chrome will also check for available updates and install them the next time you launch the web browser.
0 kommentar(er)
