Η Google released today version 86.0.4240.198 of Chrome to fix two 0days already circulating on the internet.
These two errors mark the fourth and fifth 0days that Google has fixed in Chrome over the past three weeks.
The difference this time is that the first three 0days were discovered internally by Google security researchers, these two new ones were detected by anonymous sources.
Details of where and how the new Chrome 0days have been used have not yet been published.
In accordance with changelog of Chrome 86.0.4240.198, both new vulnerabilities is:
CVE-2020-16013 - Described as "inappropriate V8 application", where V8 is the Chrome component that manages JavaScript code.
CVE-2020-16017 – Described as a “use after free” memory corruption error in Site Isolation, the Chrome component that isolates data each site between them.
It is not known at this time whether the two vulnerabilities have been used together, or individually. The first security breach was reported on Monday, while the second was reported on Wednesday.
So as you understand you should update your browser immediately.