All Chrome users should install the latest browser update—version 86.0.4240.183 on PC and version 86.0.4240.185 on Android—as soon as possible. The patches stamp out several security bugs, including two zero-day vulnerabilities hackers are actively exploiting.
Zero-day threats refer to security bugs found in prerelease software that hackers are already taking advantage of ahead of release. The first zero-day bug is listed as CVE-2020-16009 in Chrome’s latest security patch notes. The vulnerability stems from Chrome’s V8 Javascript component on desktop, but little else is known at this point. It’s not even clear how the bug is being exploited or the kinds of attacks it’s vulnerable to.
The Android bug, CVE-2020-16010 was disclosed shortly after CVE-2020-16009. It allows remote code execution through vulnerabilities in the Android app’s UI.
This is the second round of patches in two weeks that addresses zero-day bugs. A third bug that affected Chrome’s font library, CVE-2020-15999, was patched on October 20. That bug allowed hackers to install malware remotely, and was used in tandem with yet another zero-day bug found in Windows 10 to give the malicious programs even more access to the victim’s system.
The good news is that all three Chrome bugs are now fixed, and a patch for the Windows bug is coming soon. Google released a security patch for Chrome’s CVE-2020-15999 on October 20, and fixes for CVE-2020-16009 and CVE-2020-16010 now available for PC and Android. Microsoft will fix the Windows 10 bug in the upcoming November 10 patch, so keep an eye out for that.
The Chrome bugs will no longer be a threat once users have upgraded to the latest version of Chrome available for your device. On your desktop, Chrome downloads updates in the background and alerts you when it’s time to install, but don’t sit back and assume you’re safe just because Chrome can patch itself.
Security patches for zero-day bugs aren’t common, but they’re crucial to keep your PC safe from malware. Unfortunately, even the highest-priority patches don’t roll out to everyone immediately, and some users also delay installing them.
Case in point: if you didn’t install the October 20 security patch, you could have faced at least three zero-day bugs threatening your PC. That’s why you should regularly check for Chrome patches manually, even if auto-updates are turned on. On your PC, go to chrome://settings/help, or click the three-dot “More” icon in the upper-right corner of the browser and go to Settings > About Chrome (on the sidebar)
On your smartphone or tablet, simply visit Apple’s App Store or the Google Play Store to grab the latest updates for Chrome.
[ZDNet]
A botched Adobe Lightroom app update on iOS accidentally deleted users’ photos and editing presets. Adobe responded to the widespread-bug reports and
As many Lifehacker readers know by now, I love a good operating system beta. Risking life on the wild side in return for early access to new features
Several new features are showing up in the Google Maps app that could make finding stuff to do—and finding your way there—much easier. The biggest upd
Amazon’s Luna cloud gaming service is now available for Android in the U.S., adding yet another option for playing console-quality games from anywhere
With iOS 15, Apple tried to revamp Safari’s traditional user interface. In some ways, it was an ambitious effort, like how the UI changes colors to ma
ASMR content has been around for years, most of it hosted on YouTube. The acronym stands for autonomous sensory meridian response, and content in the
Unless your social media accounts are locked down with the highest levels of privacy settings, you probably have some followers you wish couldn’t see
Is any social media platform truly troll-free? My theory is that LinkedIn will be our last bastion of exclusively earnest posting. In the meantime, Ti
We are a comprehensive and trusted information platform dedicated to delivering high-quality content across a wide range of topics, including society, technology, business, health, culture, and entertainment.
From breaking news to in-depth reports, we adhere to the principles of accuracy and diverse perspectives, helping readers find clarity and reliability in today’s fast-paced information landscape.
Our goal is to be a dependable source of knowledge for every reader—making information not only accessible but truly trustworthy. Looking ahead, we will continue to enhance our content and services, connecting the world and delivering value.
