Chrome in-the-wild vulnerability CVE-2021-30551 patched today was also from the same actor and targeting.
Thanks to Chrome team for also patching within 7 days.https://t.co/1RDbbuiBfY https://t.co/Ap9dEq98Cy
— Shane Huntley (@ShaneHuntley) June 9, 2021
Moreover, the new version of the browser has eliminated the second dangerous vulnerability CVE-2021-30544, which was caused by accessing memory after it was cleared in the transition cache. This memory is used when using the “Forward” and “Back” buttons to navigate through the pages of a particular site that have already been viewed. Initially, this vulnerability was assigned a critical severity level, since by accessing this section of memory it is possible to bypass absolutely all levels of browser protection by executing the code required by the attackers.
And although not yet half of this year has passed, for developers from Google this is already the sixth zero-day vulnerability that was quickly fixed. Accordingly, in order not to be a potential target for attackers who are aware of the current vulnerabilities, it is better to use the latest version of the browser, where all known holes have already been closed.