مرورگر کروم خود را هرچه سریع‌تر به‌روزرسانی کنید تا یک نقص با بهره بردار عمومی را وصله کنید

???? ?? ??? ??????? ?? ????? ???? ?? ??????????? ?? ???? ?????? ?? ???? ???? ??????? ?? ? ?????? ????? ???? ?? ?? ????? ??? ???? ?????? ?? ???? ?? ??? ?? ???? ????? ?? ?? ??? ??????? ???? ???? ?? ???? ???.

??? ??? ?? ????? CVE-2021-21224 ??????? ?????? ?? ?? ??? ?????????? ?? ??? confusion ?? ????? ???? ??????? ???? ??? V8 ??? ?? ???? ???? ?????? ???? ??????? ?? ? ????? ???? ?? ??? ???? ????? ??.

?? ???? ???? ?????? ?? ????[?]? ??? ??? [???????] ????? ????? ????? ??? ???? ???? ????? ??????? ?? ????? ?? ????? ???? ?? ??? ???? ???? ?? ?? ????? ???? ??????? ?? ?????? ?? ????? ????? ????? ?????? ??????? ???[?].

???? ?????? ??? ????? ???????? ????? ?? ?? ??? ????? ?? ??? ???? ???[?]: “???? ?? ????????? ??????????? ?? CVE-2021-21224 ?? ??? ???????? ???? ???.”

??? ??????????? ?? ?? ??????[?] ?? ????? ????? (PoC) ??????????? ?? ??? ??? ???? ?? ???? ?? ??? “frust” ?? ?? ?????? ????? ??. ?? ???? ?? ????? ??? ??? ?? ?? ???? V8 ???? ??? ???[?]? ??? ?????????? ?? ?? ?? ???? ????? ????? Chrome ?Microsoft Edge ?Brave ?Vivaldi ? Opera ????? ?????.

????? ?? ??????? ?? ?????? ??? ???? ?? ??? ???? ??? ?? ??? ???????? ?? ????? ????? ????????? ????? ?? ????? ???????? ????? ??? ?? ???? ?? ???? ??? ?? ????? ?? ?? ???????? ?????? ????? ????.

?? ???????? ???? ??? ??? ??????? ???? ????? ?? ????????? ???? ?? ?????????? ?????? CVE-2021-21206 ? CVE-2021-21220 ????? ??[?] ?? ????? ???? ?? ?????? ?? Pwn2Own 2021 ?? ????? ??? ??? ????? ??? ???[?].

?????? ?????? ???? ???? ???????????? ?? ?????? ????? ????? ????? ???. ??????? ????????? ???? ???? ??? ????? ????????? ??? ?? ??????????? ????.

?????

[?] https://iamelli0t.github.io/2021/04/20/Chromium-Issue-1196683-1195777.html#rca-of-issue-1195777

[?] https://bugs.chromium.org/p/chromium/issues/detail?id=1195777

[?] https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html

[?] https://noahblog.360.cn/chromium_v8_remote_code_execution_vulnerability_analysis/

[?] https://chromium-review.googlesource.com/c/v8/v8/+/2826114/3/src/compiler/representation-change.cc

[?] https://groups.google.com/a/chromium.org/g/security-dev/c/fbiuFbW07vI

[?] https://thehackernews.com/2021/04/2-new-chrome-0-days-under-attack-update.html

[?] https://geekprank.com/hacker

[?] https://thehackernews.com/2021/04/update-your-chrome-browser-immediately.html

??????? :

???? ??????

پویش #دو_درجه_کمتر