{"id":224,"date":"2022-04-15T15:28:14","date_gmt":"2022-04-15T07:28:14","guid":{"rendered":"https:\/\/lucklub.com\/?p=224"},"modified":"2022-04-15T15:28:17","modified_gmt":"2022-04-15T07:28:17","slug":"%e8%b0%b7%e6%ad%8c%e6%b5%8f%e8%a7%88%e5%99%a8%e5%8f%91%e5%b8%83%e7%b4%a7%e6%80%a5%e6%9b%b4%e6%96%b0%e6%9d%a5%e4%bf%ae%e5%a4%8d%e8%a2%ab%e7%94%a8%e4%ba%8e%e6%94%bb%e5%87%bb%e7%9a%84%e9%9b%b6%e6%97%a5","status":"publish","type":"post","link":"https:\/\/lucklub.com\/?p=224","title":{"rendered":"\u8c37\u6b4c\u6d4f\u89c8\u5668\u53d1\u5e03\u7d27\u6025\u66f4\u65b0\u6765\u4fee\u590d\u88ab\u7528\u4e8e\u653b\u51fb\u7684\u96f6\u65e5\u6f0f\u6d1e"},"content":{"rendered":"\n

\u8c37\u6b4c\u4e3aWindows\uff0cMac\u548cLinux\u53d1\u5e03\u4e86\u7248\u672c100.0.4896.127\u7248\u672c\uff0c\u6765\u4fee\u590d\u4e00\u4e2a\u88ab\u6d3b\u8dc3\u7528\u4e8e\u653b\u51fb\u7684\u91cd\u8981\u96f6\u65e5\u6f0f\u6d1e\u3002<\/p>\n\n\n\n

Google has released Chrome 100.0.4896.127 for Windows, Mac, and Linux, to fix a high-severity zero-day vulnerability actively used by threat actors in attacks.<\/p>\n\n\n\n

\u201c\u8c37\u6b4c\u77e5\u9053\u5b58\u5728\u7740\u5229\u7528CVE-2022-1364\u6f0f\u6d1e\u7684\u60c5\u51b5\uff0c\u201d\u8c37\u6b4c\u5728\u4eca\u5929\u53d1\u5e03\u7684\u4e00\u4e2a\u5b89\u5168\u5efa\u8bae\u91cc\u8bf4\u3002<\/p>\n\n\n\n

\u8c37\u6b4c\u79f0\u8fd9\u4e2a\u66f4\u65b0\u5c06\u5728\u63a5\u4e0b\u6765\u51e0\u5468\u91cc\u53d1\u51fa\uff0c\u7528\u6237\u4eec\u73b0\u5728\u53ef\u4ee5\u8fdb\u5165Chrome\u83dc\u5355>\u5e2e\u52a9>\u5173\u4e8eGoogle Chrome\u6765\u7acb\u5373\u83b7\u53d6\u66f4\u65b0\u3002<\/p>\n\n\n\n

While Google states that this Chrome update will roll out in the next few weeks, users can receive it immediately by going into the\u00a0Chrome menu<\/strong>\u00a0>\u00a0Help\u00a0<\/strong>>\u00a0About Google Chrome<\/strong>.<\/p>\n\n\n\n

\u5728\u60a8\u4e0b\u6b21\u5173\u95ed\u5e76\u91cd\u65b0\u542f\u52a8Chrome\u7684\u65f6\u5019\uff0c\u5b83\u4e5f\u4f1a\u81ea\u52a8\u68c0\u67e5\u66f4\u65b0\u5e76\u5b89\u88c5\u3002<\/p>\n\n\n\n

The browser will also automatically check for new updates and install them the next time you close and relaunch Google Chrome.<\/p>\n\n\n\n

\"\"
Chrome\u66f4\u65b0<\/figcaption><\/figure>\n\n\n\n

\u7531\u4e8e\u8fd9\u4e2a\u6f0f\u6d1e\u88ab\u6d3b\u8dc3\u7684\u8fd0\u7528\u4e8e\u653b\u51fb\u4e2d\uff0c\u6211\u4eec\u5f3a\u70c8\u5efa\u8bae\u60a8\u624b\u52a8\u68c0\u67e5\u66f4\u65b0\u5e76\u91cd\u542f\u6d4f\u89c8\u5668\u6765\u5e94\u7528\u66f4\u65b0\u3002<\/p>\n\n\n\n

As this bug is actively exploited in attacks, it is strongly advised that you perform a manual check for new updates and relaunch the browser to apply them.<\/p>\n\n\n\n

\u516c\u5f00\u7684\u7ec6\u8282\u5f88\u5c11<\/h2>\n\n\n\n

Few details disclosed<\/h3>\n\n\n\n

\u4eca\u5929\u4fee\u590d\u7684\u96f6\u65e5\u6f0f\u6d1e\u88ab\u79f0\u4e3aCVE-2022-1364\uff0c\u662f\u4e00\u4e2aChrome V8 JavaScript\u5f15\u64ce\u4e2d\u7684\u9ad8\u91cd\u8981\u6027\u7684\u7c7b\u578b\u6df7\u6dc6\u6f0f\u6d1e\u3002<\/p>\n\n\n\n

The zero-day bug fixed today is tracked as\u00a0CVE-2022-1364 and\u00a0is a high severity\u00a0type confusion\u00a0weakness in the Chrome V8 JavaScript engine.<\/p>\n\n\n\n

\u8fd9\u79cd\u6df7\u6dc6\u4e00\u822c\u4f1a\u5bfc\u81f4\u6d4f\u89c8\u5668\u5728\u6210\u529f\u901a\u8fc7\u8bfb\u6216\u5199\u7f13\u51b2\u533a\u8fb9\u754c\u5916\u7684\u5185\u5b58\u88ab\u5165\u4fb5\u540e\u5d29\u6e83\uff0c\u653b\u51fb\u8005\u4e5f\u53ef\u4ee5\u7528\u5b83\u4eec\u6765\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002<\/p>\n\n\n\n

While type confusion flaws generally lead to browser crashes following successful exploitation by reading or writing memory out of buffer bounds, attackers can also exploit them to execute arbitrary code.<\/p>\n\n\n\n

\u8fd9\u4e2a\u6f0f\u6d1e\u662f\u7531\u6765\u81ea\u8c37\u6b4c\u7684\u5a01\u80c1\u5206\u6790\u5c0f\u7ec4\u7684Cl\u00e9ment Lecigne\u53d1\u73b0\u7684\uff0c\u5e76\u5728\u6628\u5929\u88ab\u62a5\u544a\u7ed9\u4e86\u8c37\u6b4c\u7684Chrome\u56e2\u961f\u3002<\/p>\n\n\n\n

This vulnerability was discovered by Cl\u00e9ment Lecigne from Google’s Threat Analysis Group who\u00a0reported it\u00a0to the Google Chrome team yesterday.<\/p>\n\n\n\n

\u867d\u7136\u8c37\u6b4c\u8bf4\u81ea\u5df1\u5df2\u7ecf\u68c0\u6d4b\u5230\u4e86\u5229\u7528\u8fd9\u4e2a\u96f6\u65e5\u6f0f\u6d1e\u7684\u653b\u51fb\uff0c\u5176\u5e76\u6ca1\u6709\u63d0\u4f9b\u6709\u5173\u653b\u51fb\u5982\u4f55\u5b9e\u65bd\u7684\u66f4\u591a\u7ec6\u8282\u3002<\/p>\n\n\n\n

While Google said they have detected attacks exploiting this zero-day, it did not provide further details regarding how these attacks are conducted.<\/p>\n\n\n\n

\u201c\u5728\u5927\u90e8\u5206\u7528\u6237\u5347\u7ea7\u4e4b\u524d\uff0c\u6709\u5173\u6f0f\u6d1e\u7684\u66f4\u591a\u4fe1\u606f\u548c\u8fde\u63a5\u5c06\u88ab\u9650\u5236\u8bbf\u95ee\uff0c\u201d\u8c37\u6b4c\u8bf4\u3002<\/p>\n\n\n\n

“Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Google added.<\/p>\n\n\n\n

\u8fd9\u662f\u6b64\u6b21\u66f4\u65b0\u91cc\u900f\u9732\u7684\u552f\u4e00\u4e00\u4e2a\u66f4\u65b0\uff0c\u8bf4\u660eChrome 100.0.4896.127\u662f\u4e3a\u4e86\u4fee\u590d\u8fd9\u4e2a\u95ee\u9898\u7684\u7d27\u6025\u66f4\u65b0\u3002<\/p>\n\n\n\n

This is the only vulnerability disclosed in this update, indicating that Chrome 100.0.4896.127 was pushed out as an emergency update to resolve this issue.<\/p>\n\n\n\n

\u8fd9\u662fChrome\u5728\u4eca\u5e74\u53d1\u73b0\u7684\u7b2c\u4e09\u4e2a\u6f0f\u6d1e<\/h2>\n\n\n\n

Third Chome\u00a0zero-day fixed this year<\/h3>\n\n\n\n

\u968f\u7740\u6b64\u6b21\u66f4\u65b0\uff0c\u8c37\u6b4c\u5df2\u7ecf\u57282022\u5e74\u521d\u53d1\u73b0\u4e86\u4e09\u4e2a\u96f6\u65e5\u6f0f\u6d1e\u4e86\u3002<\/p>\n\n\n\n

With this update, Google has addressed the third Chrome zero-day since the start of 2022.<\/p>\n\n\n\n

\u4e4b\u524d\u7684\u4e24\u4e2a\u5206\u522b\u5982\u4e0b\uff1a<\/p>\n\n\n\n

The previous two vulnerabilities found in 2022 are listed below.<\/p>\n\n\n\n

CVE-2022-1096\uff08\u4e09\u670825\u65e5\uff09<\/p>\n\n\n\n

CVE-2022-0609\uff08\u4e8c\u670814\u65e5\uff09<\/p>\n\n\n\n

\u7531\u4e8e\u8fd9\u4e2a\u96f6\u65e5\u6f0f\u6d1e\u5df2\u88ab\u53d1\u73b0\u7528\u4e8e\u653b\u51fb\uff0c\u6211\u4eec\u5f3a\u70c8\u5efa\u8bae\u60a8\u5c3d\u65e9\u66f4\u65b0Chrome\u3002<\/p>\n\n\n\n

As this zero-day is known to be used in attacks, it is strongly advised to update Google Chrome as soon as possible.<\/p>\n\n\n\n

\u539f\u6587\uff1aGoogle Chrome emergency update fixes zero-day used in attacks (bleepingcomputer.com)<\/a><\/p>\n

Share this:<\/h3>