An advisory from Google for those who are using Chrome browser. Google added seven new issues to the ‘Chrome 0-day 2021’ list. It patched all seven issues including one 0-day in its latest update 91.0.4472.164.
Google has fixed the vulnerabilities and rolled out an update on 15th June. The company also said that the CVE-2021-30563 vulnerability is actively exploited in the wild. Please visit the Chrome Security A page for more information.
High:
CVE-2021-30559: Out of bounds write in ANGLE. Reported by Seong-Hwan Park (SeHwa) of SecunologyLab on 2021-06-11
CVE-2021-30541: Use after free in V8. Reported by Richard Wheeldon on 2021-05-31
CVE-2021-30560: Use after free in Blink XSLT. Reported by Nick Wellnhofer on 2021-06-12
CVE-2021-30561: Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero on 2021-06-14
CVE-2021-30562: Use after free in WebSerial. Reported by Anonymous on 2021-06-15
CVE-2021-30563: Type Confusion in V8. Reported by Anonymous on 2021-07-12
Medium:
CVE-2021-30564: Heap buffer overflow in WebXR. Reported by Ali Merchant, iQ3Connect VR Platform in 2021
Google has fixed all these vulnerabilities and released an updated version on 15th July 2021. Please update your browser to version 91.0.4472.164 or above.
The update procedure is very simple. It’s just a matter of a couple of clicks.
How To Update Chrome Browser?
Locket the three dots buttons at the top right corner of the window. A dropdown will appear.
Then select Help > About Google Chrome on the dropdown. The update will start by itself if your machine is connected to the internet.
3. After the update is completed, it asks to relaunch the browser to complete the update process.
4. Click on the Relaunch button. That’s it.
Thanks for reading this post. Please share this post with everybody who uses Chrome and make them aware of the new Chrome 0-Day 2021.
Arun KL is a cybersecurity professional with 15+ years of experience in IT infrastructure, cloud security, vulnerability management, Penetration Testing, security operations, and incident response. He is adept at designing and implementing robust security solutions to safeguard systems and data. Arun holds multiple industry certifications including CCNA, CCNA Security, RHCE, CEH, and AWS Security.
“Knowledge Arsenal: Empowering Your Security Journey through Continuous Learning”
"Cybersecurity All-in-One For Dummies" offers a comprehensive guide to securing personal and business digital assets from cyber threats, with actionable insights from industry experts.
BurpGPT is a cutting-edge Burp Suite extension that harnesses the power of OpenAI's language models to revolutionize web application security testing. With customizable prompts and advanced AI capabilities, BurpGPT enables security professionals to uncover bespoke vulnerabilities, streamline assessments, and stay ahead of evolving threats.
PentestGPT, developed by Gelei Deng and team, revolutionizes penetration testing by harnessing AI power. Leveraging OpenAI's GPT-4, it automates and streamlines the process, making it efficient and accessible. With advanced features and interactive guidance, PentestGPT empowers testers to identify vulnerabilities effectively, representing a significant leap in cybersecurity.
Tenable BurpGPT is a powerful Burp Suite extension that leverages OpenAI's advanced language models to analyze HTTP traffic and identify potential security risks. By automating vulnerability detection and providing AI-generated insights, BurpGPT dramatically reduces manual testing efforts for security researchers, developers, and pentesters.
Microsoft Security Copilot is a revolutionary AI-powered security solution that empowers cybersecurity professionals to identify and address potential breaches effectively. By harnessing advanced technologies like OpenAI's GPT-4 and Microsoft's extensive threat intelligence, Security Copilot streamlines threat detection and response, enabling defenders to operate at machine speed and scale.