Skip to main content

6 new Google Chrome flaws allow remote phone hacking | | Update Chrome or use BRAVE Browser

Cybersecurity experts have revealed the discovery of six security issues in Google Chrome, one of the world's most popular Internet browsers. Successful exploitation of these traits can create many vicious situations.
100+ Free Mobile Security & Smart Home Images - Pixabay

Below is a brief description of the reported vulnerabilities, in addition to their scores and tracking keys according to the Common Vulnerability Scoring System (CVSS).

CVE-2020-6493: This is a back-end risk that exists due to an error in the Google Chrome Web authentication feature.
 A threatening actor can redirect victims to a malicious website to help them become vulnerable and create a code of opposition to the program.

This error scored 7.7/10, so it is considered a serious difficulty.


CVE-2020-6494: This risk exists due to insufficient confirmation of user inclusion in the Google Chrome payment item. Threatening actors can create a specially designed website, trick the victim into visiting it and lying about its contents.

This is a very serious mistake, as it scored 7.1 / 10 on the CVSS rating.


CVE-2020-6495: This error exists due to inadequate policy implementation of developer tools in Chrome.
A remote giant can redirect victims to websites with malicious content in order to bypass security measures and compromise the affected system.

The error scored 7.7 / 10, so it is considered very serious.




CVE-2020-6496: This error exists due to a usage error after the payment component in Google Chrome.
A remote attacker can create a specially designed webpage, trick the victim into visiting it, create a free-use bug and create an anti-target code.

This error also scored 7.7 / 10 points, so it is considered a high gravity error.


CVE-2020-6497: This risk exists due to the enforcement of Omnibox policy in Google Chrome and allows attackers to bypass security systems in the system.
 Hackers can trick a victim into visiting a specially designed website, bypassing security measures and gaining access to sensitive information.

This is a medium-sized risk and a score of 4.7 / 10 on the CVSS scale.


CVE-2020-6498: This error exists due to insufficient verification of user-provided development features shown in Google Chrome.
 A remote attacker can create a specially designed website, trick the victim into visiting it, and fake the content of the website.

Error scored 4.7 / 10 on the CVSS scale, so it is considered a medium size error.






Although errors can be used remotely by unverified hackers, there is no point in starting this attack. Google has already released compatible updates, so users should only confirm the installation.


Comments

Popular posts from this blog

10 WAYS TO PROMOTE AND IMPROVE YOUR WEBSITE TRAFFIC

WEBSITE MEASUREMENT   Web traffic is measured to see the popularity of websites and personal pages or sections within a website. This is an automatically generated list of all pages that appear in the Traffic Statistics web file. The hit is generated when the file is provided. The page is considered a file, but the images are also files, so a page with 5 images can generate 6 hits (5 images and even a page). Page view is generated when a visitor requests any page on the website - the visitor always generates at least one page view (main page), but can create more. Track traffic can be recorded by inserting a small HTML code on each page of the website by tracking the external applications of the website. [2] Web traffic is sometimes measured by sniffing packets and thus random samples of traffic data are obtained, providing complete information about web traffic throughout Internet usage. The following types of information are often found when monitoring web traffic: [3]  ...

LIVE Webinar on Zerologon Vulnerability Is Going To Take Place: Technical Analysis and Detection

  I'm sure most of you have now heard of a high-risk Windows server - called Zerologon - that would allow hackers to take over business networks completely. For those of you who don't know, in short, all supported versions of Windows Server applications are at risk of a serious patent infringement that resides in the Netlogon Remote Control Protocol for Domain Controllers. In other words, the primary vulnerability (CVE-2020-1472) can be exploited by the attacker to stop Active Directory services, and ultimately, the Windows domain without the need for authentication. What’s worse is that the exploitation of evidence of this error was released to the public last week, and soon after that, the attackers began exploiting vulnerabilities through programs that were not included in the wild. As explained in our compilation based on technical analysis published by Cynet's security analysts, the main problem is Microsoft's implementation of AES-CFB8, where it failed to use the ...

BYE BYE CRACKED SOFTWARES !!!!

I ndia is a country with questionable standards on copyright and security issues. This explains why most computers (PCs) in the country use pirated or hacking software, especially the operating system (OS). Pre-installed and standard OS for most laptops with names for sale in India. Typically, the seller attaches the OS and other software to the machine as part of the contract. Since the user does not have to pay for it, it is more fun to use software that is tied or broken. If a cyber attack happens, it will be a nightmare, the latest episode of Wanna cry ransome. The main reason for this is that the hack (which is part of software updates or software updates) that can protect your PC from cyber attacks does not detect such broken or embedded software. HISTORY: The first software copy protection for software was implemented on Apple II, [12] Atari 800 and Commodore 64 computers. Software publishers have implemented more sophisticated methods in an effort to prevent unauthorized copy...