Public information is limited at this point, but Skia refers to a component of Chrome that is responsible for "nearly all graphics operations, including text rendering" according to the Chromium design documents. Security issue CVE-2023-2136 is exploited in the wild, according to Google. Reported by Nan and Guang Gong of 360 Vulnerability Research Institute on Įxternal security researchers get a bug bounty when they report security issues to Google and other browser developers. Medium CVE-2023-2137: Heap buffer overflow in sqlite.
Reported by Clément Lecigne of Google's Threat Analysis Group on
High CVE-2023-2136: Integer overflow in Skia.High CVE-2023-2135: Use after free in DevTools.High CVE-2023-2134: Out of bounds memory access in Service Worker API.High CVE-2023-2133: Out of bounds memory access in Service Worker API.The five security issues include the issue that is exploited in the wild. Information about security issues that it detected internally are not revealed to the public. Google lists five of the eight security issues that it fixed in the latest Google Chrome update on the official Chrome Releases blog. Google Chrome for Android: 1.135 or 1.136.Google Chrome for Windows: 1.137 or 1.138.Once updated, the following versions should be listed on the About Google Chrome page: On Android, updates are handled by Google Play. A restart of the browser is required to complete the process. The browser runs a check for updates when the page is opened to download the latest update that it finds. Users are advised to update as soon as possible to protect their devices from potential attacks that target these vulnerabilities.Ĭhrome desktop users may load chrome://settings/help directly in the address bar, or select Menu > Help > About Google Chrome, to display the installed version. The update is available for desktop versions of Google Chrome and for Chrome on Android.
0 kommentar(er)
