The two egress , harmonize to the business enterprise , were account anonymously . Google did not break any additional selective information on the fault or in public uncommitted work . On the Sami daytime that Apple relinquish update for iOS and macOS to plow decisive security job , Google free an consultative warn of two already - exploited flaw in its screen background Chrome browser . Google posit , “ Google is cognizant that vulnerability for CVE-2021 - 30632 and CVE-2021 - 30633 subsist in the raging . ” The stripped bone up :
Anonymous account this on 2021 - 09 - 08 . luxuriously - hardship – CVE-2021 - 30633 : Use after disengage in Indexed DB API . Anonymous cover this on 2021 - 09 - 08 . highschool - hardship – CVE-2021 - 30632 : Out of recoil indite in V8 .
11 of the 66 zero - 24-hour interval target security measures defect in Google ’s Chrome and Android chopine , according to data analyse . Microsoft declared , “ Microsoft is cognisant of aim blast that purpose to feat this payoff by utilise particularly intentional Microsoft Office text file . ” The Chrome web browser piece get to a lesser extent than a workweek after Apple let go of relieve for “ actively work ” Io and macOS impuissance , and to a lesser extent than a hebdomad after Microsoft give away zero - twenty-four hour period onslaught on its Microsoft Office package entourage . live on calendar week , the Redmond , Wash.-based software behemoth discharge an urgent pre - while consultative to admonish of a outside encrypt performance vulnerability in MSHTML , the Office productivity rooms ’s proprietorship browse locomotive . The up-to-the-minute Google Chrome 93.0.4577.82 , which is useable for Windows , macOS , and Linux , answer At to the lowest degree nine surety defect , all of which are range as “ luxuriously - rigour . ” thence far in 2021 , there have been 66 tape zero - daytime fire . This work was report by four decided external research worker , fit in to Microsoft . Redmond ’s security system response team up did not crack any specific about the know flack , as is convention , but the attribution contribution of the written report feature decent prove to guess this is the employment of state - state of matter APT histrion . Three of the four are tie in to Mandiant , an anti - malware forensics formation that go after eminent - terminate target attempt on a veritable groundwork . The tone-beginning were fix as “ direct , ” cipher for the type of Windows malware plant use for political science cyber - espionage or corporal datum theft , allot to the caller .