Another security update for Chrome 86 available
Fixes ten vulnerabilities with one already being exploited.
Google has released another security update for Chrome 86. It fixes ten vulnerabilities with one already being exploited. Chrome for Android is also vulnerable.
With the update to the new Chrome version 86.0.4240.183 for Windows, macOS and Linux on November 2, Google's developers have fixed ten security vulnerabilities. Among them is a vulnerability that is already being actively exploited. With the previous Chrome update, Google had to fill a 0-day gap in the browser.
The Chrome Release Blog lists seven vulnerabilities that were discovered by external security researchers and reported to Google. Google has classified all of these vulnerabilities as high risk, including the 0-day vulnerability CVE-2020-16009.
Not much is known about CVE-2020-16009. The security vulnerability exists in Chromes Javascript engine V8 and is described as inappropriate implementation.
The manufacturers of other Chromium-based browsers (Brave, Edge, Opera, Vivaldi) will probably provide updates in the next few days to eliminate the vulnerabilities.
about author
