[German]Google has updated the Google Chrome Browser for Windows, macOS and Linux to version 86.0.4240.198 on November 11, 2020. This update closes two security holes, whereby these are already exploited.
Advertising
EP has pointed out the update in this comment (thanks for that). In the Google-Blog you can find this post with the list of vulnerabilities closed in Chrome 86.0.4240.198 for the desktop.
- [$TBD][1147206] High CVE-2020-16013: Inappropriate implementation in V8. Reported by Anonymous on 2020-11-09
- [$TBD][1146709] High CVE-2020-16017: Use after free in site isolation. Reported by Anonymous on 2020-11-07
All vulnerabilities are rated High. Google has received reports that exploits for both vulnerabilities exist in the wild. The Chrome version for Windows, Mac and Linux will be rolled out in the next few days via automatic update. You can also download this build here. Updates for Edge, Vivaldi and other clones should also be available (possibly in the coming days).
Advertising