{"id":241231,"date":"2021-01-08T00:01:00","date_gmt":"2021-01-07T23:01:00","guid":{"rendered":"https:\/\/www.borncity.com\/blog\/?p=241231"},"modified":"2021-01-07T19:17:34","modified_gmt":"2021-01-07T18:17:34","slug":"chrome-87-0-4280-141-mit-sicherheitsfixes","status":"publish","type":"post","link":"https:\/\/borncity.com\/blog\/2021\/01\/08\/chrome-87-0-4280-141-mit-sicherheitsfixes\/","title":{"rendered":"Chrome 87.0.4280.141 mit Sicherheitsfixes"},"content":{"rendered":"<p><img decoding=\"async\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline;\" src=\"https:\/\/borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Chrome.jpg\" \/>[<a href=\"https:\/\/borncity.com\/win\/?p=18088\" target=\"_blank\" rel=\"noopener\">English<\/a>]Google hat zum 6. Januar 20201den Google Chrome Browser f\u00fcr Windows, macOS und Linux auf die Version 87.0.4280.141aktualisiert. Dieses Update schlie\u00dft 16 Sicherheitsl\u00fccken.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/vg06.met.vgwort.de\/na\/f4f67108efb14f6ebf6a2fc5c8f0998e\" alt=\"\" width=\"1\" height=\"1\" \/>Mir ist die Info auf verschiedenen Webseiten (wie <a href=\"https:\/\/www.deskmodder.de\/blog\/2021\/01\/07\/google-chrome-87-0-4280-141-patcht-16-sicherheitsluecken\/\" target=\"_blank\" rel=\"noopener\">hier<\/a>) unter die Augen gekommen. Im Google-Blog gibt es <a href=\"https:\/\/chromereleases.googleblog.com\/2021\/01\/stable-channel-update-for-desktop.html\" target=\"_blank\" rel=\"noopener\">diesen Beitrag<\/a> mit einer Liste der im Chrome 87.0.4280.141 f\u00fcr den Desktop geschlossenen Schwachstellen. Hier einige hervorgehobene Schwachstellen, die beseitigt wurden.<\/p>\n<ul>\n<li>[$20000][1148749] High CVE-2021-21106: Use after free in autofill. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi'anxin Group on 2020-11-13<\/li>\n<li>[$20000][1153595] High CVE-2021-21107: Use after free in drag and drop. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2020-11-30<\/li>\n<li>[$20000][1155426] High CVE-2021-21108: Use after free in media. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2020-12-04<\/li>\n<li>[$15000][1152334] High CVE-2021-21109: Use after free in payments. Reported by Rong Jian and Guang Gong of 360 Alpha Lab on 2020-11-24<\/li>\n<li>[$15000][1152451] High CVE-2021-21110: Use after free in safe browsing. Reported by Anonymous on 2020-11-24<\/li>\n<li>[$7500][1149125] High CVE-2021-21111: Insufficient policy enforcement in WebUI. Reported by Alesandro Ortiz on 2020-11-15<\/li>\n<li>[$7500][1151298] High CVE-2021-21112: Use after free in Blink. Reported by YoungJoo Lee(@ashuu_lee) of Raon Whitehat on 2020-11-20<\/li>\n<li>[$6000][1155178] High CVE-2021-21113: Heap buffer overflow in Skia. Reported by tsubmunu on 2020-12-03<\/li>\n<li>[$N\/A][1148309] High CVE-2020-16043: Insufficient data validation in networking. Reported by Samy Kamkar, Ben Seri at Armis, Gregory Vishnepolsky at Armis on 2020-11-12<\/li>\n<li>[$N\/A][1150065] High CVE-2021-21114: Use after free in audio. Reported by Man Yue Mo of GitHub Security Lab on 2020-11-17<\/li>\n<li>[$TBD][1157790] High CVE-2020-15995: Out of bounds write in V8. Reported by Bohan Liu (@P4nda20371774) of Tencent Security Xuanwu Lab on 2020-12-11<\/li>\n<li>[$TBD][1157814] High CVE-2021-21115: Use after free in safe browsing. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2020-12-11<\/li>\n<li>[$N\/A][1151069] Medium CVE-2021-21116: Heap buffer overflow in audio. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2020-11-19<\/li>\n<\/ul>\n<p>Ein Teil der Schwachstellen ist mit der Einstufung High versehen. Weitere Probleme wurden intern durch Audits und Fuzzing aufgesp\u00fcrt und behoben. Die Chrome-Version f\u00fcr Windows, Mac und Linux wird in den n\u00e4chsten Tagen \u00fcber die automatische Update-Funktion auf die Systeme ausgerollt. Sie k\u00f6nnen diese Build aber auch <a href=\"https:\/\/www.google.com\/intl\/de_de\/chrome\/\" target=\"_blank\" rel=\"noopener\">hier herunterladen<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>[English]Google hat zum 6. Januar 20201den Google Chrome Browser f\u00fcr Windows, macOS und Linux auf die Version 87.0.4280.141aktualisiert. Dieses Update schlie\u00dft 16 Sicherheitsl\u00fccken.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1356,426,185],"tags":[406,4315],"class_list":["post-241231","post","type-post","status-publish","format-standard","hentry","category-google-chrome-internet","category-sicherheit","category-update","tag-chrome","tag-update"],"_links":{"self":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/241231","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/comments?post=241231"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/posts\/241231\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/media?parent=241231"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/categories?post=241231"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/blog\/wp-json\/wp\/v2\/tags?post=241231"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}