Google on Wednesday released version 90.0.4430.85 of its Chrome browser for all supported Windows, Mac, and Linux desktops.
The release contains seven security patches, including a zero day vulnerability already in use by malicious users.
The zero-day vulnerability, which has the ID CVE-2021-21224, was described as "type confusion in V8".
The Chrome Srinivas Sista Technical Administrator reports and analyzes five vulnerabilities: CVE-2021-21222 heap buffer overflow in V8, CVE-2021-21223 integer overflow in Mojo, CVE-2021-21225 out of bounds memory access in V8, CVE-2021-21226 use after free in navigation, and CVE-2021-21224 type confusion in V8.
"Google knows that exploits for CVE-2021-21224 are already underway," he said.
Srinivas Sista thanked five researchers for their contribution and added that his own department was responsible for a wide range of corrections.
George is still wondering what he is doing here….
