For a tote up of seven hemipteran , all of which possess a asperity range of utmost , Chrome 86.0.4240.183 for Windows , macOS , and Linux are moved into the static transmit with touch on . intercept admit CVE-2020 - 16004 ( usance after liberate in the exploiter interface ) , CVE-2020 - 16005 ( nonstarter to enforce regularisation in ANGLE ) , CVE-2020 - 16006 ( failure to insert in V8 ) , CVE-2020 - 16007 ( failure to formalise information in the installer ) , CVE-2020 - 16008 ( WebRTC heap soften well over ) , and CVE-2020 - 16011 ( Windows UI inexpensive buff spill over ) . CVE-2020 - 16009 is the seventh of the exposure , delimit as improper effectuation in the V8 JavaScript railway locomotive . Google monish that in the raging , an exploit for the flaw already subsist . The zero - day defect , chance on by Clement Lecigne of Google ’s Threat Research Division and Samuel Groß of the Project Zero team up , can be mistreated to crooked memory with a retrace HTML Page and ultimately achieve arbitrary cipher performance . An assailant will experience to lead astray the drug user into visit the malicious site to work the hemipteran . In fact , by induce a exploiter to inflict a malicious internet site , all of these hemipterous insect can be mistreat for computer code carrying out or gimmick via media . Google unfreeze make for early high-pitched - rigorousness tap in Chrome less than two workweek agone , include CVE-2020 - 15999 , an aggressively misuse FreeType zero - twenty-four hour period bug . Google has confirmed this week the dismissal of a doctor for CVE-2020 - 16010 , a Chrome for Android high school - inclemency beleaguer , which has as well been clapperclaw in the barbaric . The problem was detect by Maddie Stone , Mark Brand , and Sergei Glazunov of Google Project Zero , a spate buffer storage runoff in the UI on Android . The pester is lick by Chrome 86.0.4240.185 for Android .
Ben Hawkes of Google Project Zero far-famed on Twitter that finally workweek , both vulnerability were institute . Google enjoin it award the investigator who regain the freshly solved intercept $ 36,000 in tease bounteousness bonus . all the same , the companionship did not let in info on the tot accuse for CVE-2020 - 16008 and land that the two by choice maltreated vulnerability were not hold a bountifulness .
