Updates for Chromium-based browsers

Updates for Chromium-based browsers against 0-day vulnerability

After Google released a new security update for Chrome 86, other manufacturers of Chromium-based browsers followed with updates in order to close a second vulnerability. Microsoft Edge, Brave, Opera and Vivaldi are up to date now.

In the new Chrome version 86.0.4240.183 for Windows, macOS and Linux from November 2, Google developers fixed ten security holes. Among them is a vulnerability (CVE-2020-16009) that is already actively being exploited. Other manufacturers of Chromium-based browsers have also provided updates to fill this vulnerability.

Opera updated the browser to version 72.0.3815.207 on November 5 with another update. This version is based on Chromium 86.0.4240.183 and is therefore also secured.

Not much is known about the security vulnerability CVE-2020-16009). The security hole is in Chromes JavaScript engine V8 and is described as inappropriate implementation. An attacker could exploit the vulnerability by means of a prepared web page in order to gain control over the attacked computer. The Chrome Release Blog states that Google is aware that an exploit for this vulnerability exists.

After Google's Chrome update on November 2nd, Vivaldi and Brave reacted the fastest and released secure versions the next day. Besides the update to Chromium 86.0.4240.183, the update to Brave Browser 1.16.72 also delivered a few bug fixes. Vivaldi 3.4.2066.94 is only used to update the Chromium base to version 86.0.4240.185.