Security Updates Chrome 80.0.3987.149 / Edge 80.0.361.69

[English]Google has released a security update for the Chrome 80.0.3987.149 on 18 March 2020. The Microsoft developers have followed up on March 19, 2020 and released a security update for the Chromium Edge browser. This update raises the browser to version 80.0.361.69 and closes a number of vulnerabilities.

Chrome 80.0.3987.149

The Chromium developers have released the Google Chrome 80.0.3987.149 on March 18, 2020. It is a security update which closes 13 critical security holes after this blog post. 

• [$8500][1051748] High CVE-2020-6422: Use after free in WebGL. Reported by David Manouchehri on 2020-02-13
• [$NA][1031142] High CVE-2020-6424: Use after free in media. Reported by Sergei Glazunov of Google Project Zero on 2019-12-05
• [$NA][1031670] High CVE-2020-6425: Insufficient policy enforcement in extensions. Reported by Sergei Glazunov of Google Project Zero on 2019-12-06
• [$TBD][1052647] High CVE-2020-6426: Inappropriate implementation in V8. Reported by Avihay Cohen @ SeraphicAlgorithms on 2020-02-16
• [$TBD][1055788] High CVE-2020-6427: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-02-25
• [$TBD][1057593] High CVE-2020-6428: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-02
• [$TBD][1057627] High CVE-2020-6429: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-02
• [$NA][1059349] High CVE-2019-20503: Out of bounds read in usersctplib. Reported by Natalie Silvanovich of Google Project Zero on 2020-03-06
• [$TBD][1059686] High CVE-2020-6449: Use after free in audio. Reported by Man Yue Mo of Semmle Security Research Team on 2020-03-09

All these vulnerabilities are rated High.

Availability and download

Chrome version 80.0.3987.149 is available for Windows, Mac and Linux and is rolled out to the systems via the automatic update feature. You can download it here.

Edge 80.0.361.69

The night (20.3.2029) Microsoft has released a security advisory for the new Chromium Edge browser Edge 80.0.361.69 because there are critical security updates.

Microsoft Security Advisory ADV200002

– ADV200002 | Chromium Security Updates for Microsoft Edge based on Chromium
– Reason for Revision: Updated advisory to announce a new version of Microsoft Edge
   (Chromium-based). Please see the table for more information.
– Originally posted: January 28, 2020
– Updated: March 19, 2020
– Version: 6.0

According to ADV200002  the new Edge version 80.0.361.69 is based on the chromium browser version 80.0.3987.132 released on March 3, 2020. The new Edge version closes a number of vulnerabilities:

• CVE-2020-6422,
• CVE-2020-6424,
• CVE-2020-6426,
• CVE-2020-6427,
• CVE-2020-6428,
• CVE-2020-6429,
• CVE-2019-20503,
• CVE-2020-6449

These correspond to the vulnerabilities listed above for the Chrome browser and are assigned the security classification High.