Of course, it would better if there were no such high-severity vulnerabilities in the code to start with, but the truth of the matter is we don't live in an ideal world where mistakes are not made.
It is proof that the vulnerability disclosure system is working and working well. The maturity of the Google Chrome security program is evidenced by the discovery and remediation of these vulnerabilities. Google vulnerability disclosure system working as intendedĪs I have said before, this doesn't equate to poor security from Google, quite the opposite in fact. I have reached out to Google for a statement. That's a very welcome, but equally unusual, fast turnaround. The seriousness of this vulnerability is highlighted yet again by the fact that it was reported to Google April 13 and the security update released the following day. Oddly, the Google update announcement states that it includes two security fixes but only actually lists CVE-2022-1364 as disclosed by Clément Lecigne who works with the Google Threat Analysis Group.
0 kommentar(er)
