Google Chrome 64.0.3282.119 – Modern and fast Web browser.

January 27, 2018

Google Chrome is a Web browser by Google, created to be a modern platform for Web pages and applications. It utilizes very fast loading of Web pages and has a V8 engine, which is a custom built JavaScript engine. Because Google has used parts from Apple’s Safari and Mozilla’s Firefox browsers, they made the project open source.

Note:Google Chrome is free software, you can go to the official website to download.

What’s New

Version 64.0.3282.119:

Security Fixes and Rewards:

[780450] High CVE-2018-6031: Use after free in PDFium.
[787103] High CVE-2018-6032: Same origin bypass in Shared Worker.
[793620] High CVE-2018-6033: Race when opening downloaded files.
[784183] Medium CVE-2018-6034: Integer overflow in Blink.
[797500] Medium CVE-2018-6035: Insufficient isolation of devtools from extensions.
[789952] Medium CVE-2018-6036: Integer underflow in WebAssembly.
[753645] Medium CVE-2018-6037: Insufficient user gesture requirements in autofill.
[774174] Medium CVE-2018-6038: Heap buffer overflow in WebGL.
[775527] Medium CVE-2018-6039: XSS in DevTools.
[778658] Medium CVE-2018-6040: Content security policy bypass.
[760342] Medium CVE-2018-6041: URL spoof in Navigation.
[773930] Medium CVE-2018-6042: URL spoof in OmniBox.
[785809] Medium CVE-2018-6043: Insufficient escaping with external URL handlers.
[797497] Medium CVE-2018-6045: Insufficient isolation of devtools from extensions.
[798163] Medium CVE-2018-6046: Insufficient isolation of devtools from extensions.
[799847] Medium CVE-2018-6047: Cross origin URL leak in WebGL.
[763194] Low CVE-2018-6048: Referrer policy bypass in Blink.
[771848] Low CVE-2017-15420: URL spoofing in Omnibox.
[774438] Low CVE-2018-6049: UI spoof in Permissions.
[774842] Low CVE-2018-6050: URL spoof in OmniBox.
[441275] Low CVE-2018-6051: Referrer leak in XSS Auditor.
[615608] Low CVE-2018-6052: Incomplete no-referrer policy implementation.
[758169] Low CVE-2018-6053: Leak of page thumbnails in New Tab Page.
[797511] Low CVE-2018-6054: Use after free in WebUI.
[805285] Various fixes from internal audits, fuzzing and other initiatives
This release contains additional mitigations against speculative side-channel attack techniques.