Security Chrome 88 update patches a zero-day security exploit (CVE-2021-21148)

eva2000 · Feb 7, 2021

Using Chrome browser or other versions of Chromium like in Microsoft Edge or Opera? Then make sure to update to Chrome 88 ASAP as it patches a security issue, CVE-2021-21148 for a zero day exploit which is actively being exploited Chrome 88 update patches a zero-day that is being actively exploited | Engadget !

The version of Chrome 88 rolling out now for Windows, Mac and Linux (88.0.4324.150) addresses one item, but it’s a big one.

According to a blog post, security researcher Mattias Buelens reported a vulnerability in Chrome’s WebAssembly and JavaScript engine V8, which could allow an attacker to execute code on a victim’s computer. Google didn’t go into detail about the problem, tagged CVE-2021-21148, but said it’s aware of reports the bug is already being exploited in the wild, so update immediately.

In a note, Google said “Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.” As a result we don’t know what exploit this is tied to, but ZDNet notes the timing puts it close to revelations about a campaign carried out by North Korean hackers that targeted security researchers, which may have relied on zero-day exploits in Chrome and Internet Explorer.
Click to expand...

Log in / Register

Forums

Join the community today

Security Chrome 88 update patches a zero-day security exploit (CVE-2021-21148)

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

Security Chrome 88 update patches a zero-day security exploit (CVE-2021-21148)

eva2000 Administrator Staff Member

.