Serious Chrome zero-day
nakedsecurity.sophos.com
Serious Chrome zero-day
1–10 of 377 posts
Re: Serious Chrome zero-day
#2This is a blog post that seems to just be reporting on this tweet: https://twitter.com/justinschuh/status/1103087046661267456
which in turn is referencing this new release from this past Friday: https://chromereleases.googleblog.com/2019/03/stable-channel...
which seems to have been motivated by "CVE-2019-5786: Use-after-free in FileReader. Reported by Clement Lecigne of Google's Threat Analysis Group on 2019-02-27".
That CVE is still reserved/non-public on the Mitre NVD though.
Re: Serious Chrome zero-day
#3What does this mean for Electron Apps?
Re: Serious Chrome zero-day
#4clicks Help->About Google Chrome
Updates are disabled by your administrator.
Re: Serious Chrome zero-day
#5What does this mean for Electron Apps?
They are very likely to be vulnerable.
Re: Serious Chrome zero-day
#6This blog post is so watered down and manages to digress at every possible point that it is almost impossible to read. The only useful part of the text are the URLs.
Also, this:
> A vulnerability, or vuln for short, is a bug that makes software go wrong in a way that reduces computer security.
Does anyone actually use this abbreviation?
Re: Serious Chrome zero-day
#7This is a blog post that seems to just be reporting on this tweet: https://twitter.com/justinschuh/status/1103087046661267456 which in turn is referencing this new release from this past Friday: https://chromereleases.googleblog.com/2019/03/stable-channel... which seems to have been motivated by "CVE-2019-5786: Use-after-free in FileReader. Reported by Clement Lecigne of Google's Threat Analysis Group on 2019-02-27".…
Well done! That read was unpleasantly verbose.
Re: Serious Chrome zero-day
#8This is a blog post that seems to just be reporting on this tweet: https://twitter.com/justinschuh/status/1103087046661267456 which in turn is referencing this new release from this past Friday: https://chromereleases.googleblog.com/2019/03/stable-channel... which seems to have been motivated by "CVE-2019-5786: Use-after-free in FileReader. Reported by Clement Lecigne of Google's Threat Analysis Group on 2019-02-27".…
From the code referenced, it seems like this might be the commit that fixes this issue: https://github.com/chromium/chromium/commit/ba9748e78ec7e9c0...
Re: Serious Chrome zero-day
#9Honest question - why do people use Chrome? It’s from an arguably as-evil company as Facebook. Alternatives exist. What’s the draw?
Re: Serious Chrome zero-day
#10clicks Help->About Google Chrome Updates are disabled by your administrator. welp.
Don't worry, it's for your safety.