انتشار به‌روزرسانی فوری کروم برای رفع آسیب‌پذیری روز صفر مورد بهره‌برداری فعال توسط گوگل

???? ??? ???? ?? ????? ???? ??????????????? ???? ?? ???? ?? ???? ??? ??? ??? ??? ?? ?????? ?? ???? ??? ????? ??? ?? ??? ????? ??? ??? ?? ?? ?????? ??? ?????? ????? ??? ???.

??? ?????????? ?? ??? ???? ?? ???????? CVE-2023-2033 ????? ??????? ???????? ?? ???? ??????? ???[?] ?? ????? ???? ??????? V8 ????? ??? ???. Clement Lecigne ?? ???? ????? ??????? ???? (TAG) ????? ????? ??? ???? ?? ?? ????? ???? ???.

?? ???? ?????? ????[?] ?????????? ??? NIST (NVD)? «?????? ???? ?? V8 ?? ???? ???? ??? ?? ???? ?????????????? ?? ?? ????? ?? ??? ??? ????? ?????? ?? ?????? ?????? ?? ????? heap ?? ???? ?? ???? HTML ??????????? ?????????? ???».

??? ??? ?????? ????? ???[?] ?? “?? ?????????? ???? CVE-2023-2033 ?? ??? ??????? ???? ????”? ??? ?? ???????????? ?????? ??? ????? ?? ???????? ???? (IoCs) ???? ??????? ?? ??????????? ????? ???? ????? ????? ??????? ???.

?????? ?? ??? ?????? ?? CVE-2023-2033 ?????????? ?? [?]CVE-2022-1096? [?]CVE-2022-1364? CVE-2022-3723[6] ? [?]CVE-2022-4262 ???? – ???? ??? ???? ?? V8 ?? ?????? ???? ???? ??????????? ????????????? ? ???? ???? ?? ??? ???? ????? ????.

???? ??? ????? ??????? ? ?????????? ??? ??? ?? ???? ?? ????? ???? ???. ??? ????? ??? ??? ??????? ???? ??????? ?? Citizen Lab ? ?????????? ?? ???? ?????? ??????? ?? ??????? ???????????? ?????? ?? ??? QuaDream ???? ??? ???? ???? ??????????????? ???????? ????????? ????? ? ?? ????? ?????????? ???????? ?? ??? ???? ?? ?? ??? ???? ??? ?? Apple iOS ??????? ?????[?].

?? ??????? ????? ?????? ???? ???? ??????? ???????? ???? ?????????????? ?? ???? Windows? macOS ? Linux ????? ????. ?????? ?? ??????? ????????? ????? ?? Chromium ????? Microsoft Edge? Brave? Opera? ? Vivaldi ????? ?????? ?? ?????? ?? ????? ???? ??????? ??????? ?? ????? ????.

?????

[?] https://cwe.mitre.org/data/definitions/843.html

[?] https://nvd.nist.gov/vuln/detail/CVE-2023-2033

[?] https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html

[?] https://thehackernews.com/2022/03/google-issues-urgent-chrome-update-to.html

[?] https://apa.aut.ac.ir/?p=8936

[?] https://apa.aut.ac.ir/?p=9287

[?] https://apa.aut.ac.ir/?p=9344

[?] https://thehackernews.com/2023/04/israel-based-spyware-firm-quadream.html

[?] https://thehackernews.com/2023/04/google-releases-urgent-chrome-update-to.html