Google Chrome 70.0.3538.77

Patch Name: googlechrome70.0.3538.77.dmg: Patch Description: Update for Google Chrome For Mac (70.0.3538.77) Bulletin Id: MAC-012: Bulletin Title: Google Chrome for Mac. Chrome Version: 70.0.3538.77 stable Operating System: Windows 10 (version 1803) When Chrome is installed on Windows and the user joins a malicious network that advertises a WPAD script (e.g. Via DHCP), Chrome will fetch the WPAD script from the specified URL and use it for proxying decisions. 2018年10月25日に、Windows版のGoogle Chromeの安定版でバージョン70.0.3538.77へのアップデートが利用可能になっていたので、インストールしてみました。公式ブログの「Chrome Releases」によると、. Patch Name: GoogleChromeStandaloneEnterprise6470.0.3538.77.msi: Patch Description: Google Chrome (x64) (70.0.3538.77) Bulletin Id: TU-017: Bulletin Title. Patch Name: googlechrome70.0.3538.77.dmg: Patch Description: Update for Google Chrome For Mac (70.0.3538.77) Bulletin Id: MAC-012: Bulletin Title: Google Chrome for Mac.

Security flaws and vulnerabilities in popular software and applications have become a constant in the cybersecurity environment. This is especially notable when security flaws can potentially lead to a broader range of consequences for the general public. Oftentimes, this is unfortunately the case.

A software vulnerability can lead to drastically different scenarios e.g depending on the scope of how it will be exploited by malicious actors. On multiple occasions, security flaws have cropped up which allow a cybercriminal to remote control a system by taking advantage of security gaps.

Recently, in particular, a slew of these remote code execution vulnerabilities have been noted by security researchers. These flaws can also be discovered within any app, service, or software product and are in most cases patched (updated) without affecting too many users. However, sometimes simply patching an exploited vulnerability is impossible at the heavy end of the spectrum. To that end, simple vulnerabilities can lead to security flaws like zero-days that can translate to a global threat.

This time, the latest release reports indicate yet another issue with the Google Chrome browser. Google’s widely-used Chrome browser has been particularly in the spotlight because of a steady flow of security vulnerabilities. These specific vulnerabilities have been reported via Google Chrome Releases on August 2nd, 2021.

Seven Vulnerabilities Discovered in Google Chrome

On August 2nd, 2021 it has been reported officially by the ‘Chrome team’ (posted by security researcher Srinivas Sista) on the Google Blog that seven vulnerabilities were discovered in Google’s Chrome Browser. In this instance, all of the vulnerabilities affect the same software versions of Google Chrome and are categorized ranging from medium to high risk as per the CVE (Common Vulnerabilities and Exposures) system. There are a total of 5 high-risk vulnerabilities, and 2 medium-risk vulnerabilities within Google Chrome’s functions.

Download Google Chrome 70.0.3538.77

Description of The Vulnerabilities

A description of the seven vulnerabilities is as follows separated into high and medium risk categories; Cain and abel ip grabber download.

High-Risk

A high-risk heap buffer overflow in the bookmarks function can allow a remote attacker to compromise a vulnerable system
A high-risk use after free flaw in the file system API that can allow a remote attacker to compromise a vulnerable system
A high-risk out of bounds write flaw in the tab groups function that can allow a remote attacker to compromise a vulnerable system
A high-risk out of bounds read in the tab strip function that can allow a remote attacker to compromise a vulnerable system
A high-risk use after free flaw in the page info UI function that can allow a remote attacker to compromise a vulnerable system

Medium-Risk

A medium-risk incorrect security flaw in the UI in navigation function that can allow a remote attacker to perform a spoofing attack
A medium-risk use after free flaw in the browser UI function that can allow a remote attacker to compromise a vulnerable system

Technical Details Surrounding The Vulnerability

The Google Chrome vulnerabilities are classified as follows, along with their respective CVE ID codes;

CVE-2021-30590 -High
CVE-2021-30591 -High
CVE-2021-30592 -High
CVE-2021-30593 -High
CVE-2021-30594 -High
CVE-2021-30596 – Medium
CVE-2021-30597 – Medium

The vulnerable software version numbers of Google Chrome are as follows;

Google Chrome: 7.0.517.41, 7.0.517.44, 70.0.3538.67, 70.0.3538.77, 70.0.3538.102, 70.0.3538.110,

71.0.3578.80, 71.0.3578.98, 72.0.3626.81, 72.0.3626.96, 72.0.3626.109, 72.0.3626.119, 72.0.3626.121,

73.0.3683.75, 73.0.3683.86, 73.0.3683.103, 74.0.3729.108, 74.0.3729.131, 74.0.3729.157,

74.0.3729.169, 75.0.3770.80, 75.0.3770.90, 75.0.3770.100, 75.0.3770.142, 76.0.3809.87,

76.0.3809.100, 76.0.3809.132, 77.0.3865.75, 77.0.3865.90, 77.0.3865.120, 78.0.3904.70, 78.0.3904.87,

78.0.3904.97, 78.0.3904.108, 79.0.3945.79, 79.0.3945.88, 79.0.3945.117, 79.0.3945.130, 80.0.3987.87,

80.0.3987.100, 80.0.3987.106, 80.0.3987.116, 80.0.3987.122, 80.0.3987.132, 80.0.3987.149,

80.0.3987.162, 80.0.3987.163, 81.0.4044.92, 81.0.4044.113, 81.0.4044.122, 81.0.4044.129,

81.0.4044.138, 83.0.4103.61, 83.0.4103.97, 83.0.4103.106, 83.0.4103.116, 84.0.4147.89,

84.0.4147.105, 84.0.4147.125, 84.0.4147.135, 85.0.4183.83, 85.0.4183.102, 85.0.4183.121,

86.0.4240.75, 86.0.4240.111, 86.0.4240.183, 86.0.4240.193, 86.0.4240.198, 87.0.4280.66,

87.0.4280.88, 87.0.4280.141, 88.0.4324.96, 88.0.4324.104, 88.0.4324.146, 88.0.4324.150,

88.0.4324.182, 88.0.4324.190, 89.0.4389.72, 89.0.4389.82, 89.0.4389.90, 89.0.4389.114,

89.0.4389.128, 90.0.4430.72, 90.0.4430.85, 90.0.4430.93, 90.0.4430.212, 91.0.4472.77, 91.0.4472.101,

91.0.4472.106, 91.0.4472.114, 91.0.4472.124, 91.0.4472.164, 92.0.4515.107

The Conclusion

So far, Google has not officially released any information regarding any exploits resulting from these vulnerabilities. This means that no reported damage to users has resulted as of yet. Furthermore, a patch has since been developed and released that mitigates the above seven vulnerabilities. Users should update to the Chrome stable channel update 92.0.4515.131 as soon as possible for Windows, Mac, and Linux. The update, according to Google, contains 10 security fixes.