{"vulnerability": "cve-2021-3797", "sightings": [{"uuid": "7974b50b-3f65-4d03-9852-92be70db851d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "65757f28-c872-40d8-9dd1-5777b5e6b350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "9c7d729e-9625-4dae-9a92-76578d375095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "10692aad-fff0-4ab0-9cf7-e43b9a4bcf68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "dd637b68-1c86-480f-bf24-81ca42832ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "4be59875-9df9-42d8-9af9-d8276955ac12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:17.000000Z"}, {"uuid": "07e9a653-a30f-4f3a-91d8-d2c92b78912c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/7effef96-bacc-4102-bf33-d90a3fed8d03", "content": "", "creation_timestamp": "2024-11-14T06:10:15.000000Z"}, {"uuid": "a5f428e5-1726-4dd8-8484-269d2f7056b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "MISP/09e0dd40-6163-4c8c-8214-cb3a66747835", "content": "", "creation_timestamp": "2024-11-14T06:10:14.000000Z"}, {"uuid": "078ad4dc-74e7-4785-b99e-679a3a416d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971070", "content": "", "creation_timestamp": "2024-12-24T20:23:49.876058Z"}, {"uuid": "b4d21320-df92-406e-b856-8674759eadc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971072", "content": "", "creation_timestamp": "2024-12-24T20:23:51.447871Z"}, {"uuid": "ae0edea9-22c8-4846-a81a-794a7db09989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971078", "content": "", "creation_timestamp": "2024-12-24T20:23:56.135724Z"}, {"uuid": "d5452fb7-434c-4e98-a5a2-5cb7075f18d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:57.000000Z"}, {"uuid": "df02e5b5-8cf5-4b63-8fc1-72ec55fa8a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:57.000000Z"}, {"uuid": "8b97bd0b-3c6b-4693-86ca-a46e124f7719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:57.000000Z"}, {"uuid": "d90c3422-2a8d-4e9d-a7ad-359c7d1ecf1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=662", "content": "", "creation_timestamp": "2021-10-04T04:00:00.000000Z"}, {"uuid": "09ca6f93-7c74-48ed-bb73-c9c7d546b849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=663", "content": "", "creation_timestamp": "2021-10-04T04:00:00.000000Z"}, {"uuid": "54f93ab6-98be-4b06-b600-6495adf013d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=660", "content": "", "creation_timestamp": "2021-09-27T04:00:00.000000Z"}, {"uuid": "2f2fc3d1-49c4-4338-8486-ff29d496ed81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=663", "content": "", "creation_timestamp": "2021-10-04T04:00:00.000000Z"}, {"uuid": "b5233b3d-67f3-40cb-9276-5ded2142fbc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=662", "content": "", "creation_timestamp": "2021-10-04T04:00:00.000000Z"}, {"uuid": "d3c5d2c1-fd33-4814-88c7-4601f040c89f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=659", "content": "", "creation_timestamp": "2021-09-27T04:00:00.000000Z"}, {"uuid": "5096f1d4-02fc-45f1-a046-282aca163f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/53c9f7fb-ac8c-425f-a76f-45b8d371cbed", "content": "", "creation_timestamp": "2026-02-02T12:28:44.694593Z"}, {"uuid": "7231546a-2d93-4748-865f-5b947ef47265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/79b8031b-422a-4023-892e-aefa439a8824", "content": "", "creation_timestamp": "2026-02-02T12:28:45.315029Z"}, {"uuid": "7084fd28-8d71-4b92-857b-8b5a941af32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8b97620b-9a7a-45e6-b8f3-678c88f5e187", "content": "", "creation_timestamp": "2026-02-02T12:28:45.841343Z"}, {"uuid": "1f4ca721-a382-4588-bbc2-4bb875873dce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/cKure/7278", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2021-37973: Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability.\n\nUse after free in Portals. Reported by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero on 2021-09-21 (https://bugs.chromium.org/p/chromium/issues/detail?id=1251727)\n\nhttps://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html\n\nhttps://thehackernews.com/2021/09/urgent-chrome-update-released-to-patch.html", "creation_timestamp": "2021-09-25T07:38:20.000000Z"}, {"uuid": "b7eb4f4b-435b-4b77-9a21-db11a48c9b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/technical_private_cat/374", "content": "\u0410 \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u044d\u0442\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0443\u0436\u043d\u043e?\ud83e\uddf2\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u043c \u044d\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438.  \n\u041d\u043e \u0437\u0430 \u043a\u0435\u043c \u0438 \u043a\u043e\u043c\u0443 \u043d\u0443\u0436\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c? \n\n\u041d\u0443 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0443. \u0418\u043c \u043d\u0443\u0436\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u043b\u0438 \u0442\u0435\u0440\u0440\u043e\u0440\u0438\u0441\u0442\u0430\u043c\u0438 . \n\u041d\u043e \u043a\u0440\u043e\u043c\u0435 \u044d\u0442\u043e\u0433\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043d\u0435 \u043f\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e \u0438 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0437\u0430  \u043a\u0430\u043a\u0438\u043c\u0438 \u043b\u0438\u0431\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438\u043b\u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u043c\u0438 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u043c\u0438 \u043b\u0438\u0446\u0430\u043c\u0438 \u0431\u0435\u0437 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 . \n\u0422\u0430\u043a \u0436\u0435 \u044d\u0442\u043e \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445.  \u041f\u043e\u043c\u0438\u043c\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430 \u044d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 - \u0414\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0437\u0430 \u043a\u0430\u043a\u0438\u043c\u0438 \u043b\u0438\u0431\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0435\u043d\u0442\u0430\u043c\u0438 \u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e. \n\u0412\u043f\u043e\u043b\u043d\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441\u0430\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f, \u043c\u043d\u043e\u0433\u0438\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430 \u043f\u043e\u043a\u0443\u043f\u0430\u044e\u0442 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0442\u0430\u043a\u043e\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435, \u0443 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439. \n\u041a\u043e\u043d\u0435\u0447\u043d\u043e \u0442\u0430\u043a\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u0438 \u043a\u0430\u043a\u0438\u043c \u0442\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c . \n\u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0438 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0432\u0437\u043b\u043e\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 , \u0438\u043b\u0438 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043b\u0438\u0446 . \n\u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u041f\u041e \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435 \u043f\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e (\u0434\u043b\u044f \u043b\u043e\u0432\u043b\u0438 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 ) , \u0430 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u0435\u0439 \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043b\u044e\u0434\u0435\u0439\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043e\u0447\u0435\u043d\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 \n\u2728\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c \u0441\u0430\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \n\n\u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 forcedentry\ud83c\udf4f\n\n\u041f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430, \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0433\u043e Pegasus . \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u043a\u043b\u0438\u043a\u043e\u043c \u0434\u043b\u044f iMessage. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043d\u0430\u0437\u0432\u0430\u043b\u0438 forcedentry, \u043e\u043d \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Apple, \u0438 \u0431\u044b\u043b \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u0435\u043d \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple iOS, macOS \u0438 WatchOS. \n\u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 27 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0444\u0430\u0439\u043b\u0430 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .gif, \u00ab\u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0431\u044b\u043b 748-\u0431\u0430\u0439\u0442\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c Adobe PSD\u00bb, \u043f\u0440\u0438\u0447\u0435\u043c \u043a\u0430\u0436\u0434\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u0441\u0431\u043e\u0439 IMTranscoderAgent \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0447\u0435\u0442\u044b\u0440\u0435 \u0440\u0430\u0437\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430 .gif, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0431\u044b\u043b\u0438 \"\u0444\u0430\u0439\u043b\u0430\u043c\u0438 Adobe PDF, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c\u0438 \u043f\u043e\u0442\u043e\u043a \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 JBIG2\".\n\u042d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043d\u043e\u043c\u0435\u0440 CVE-2021-30860 . \n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Apple, CoreGraphics, \u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \nApple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0438 iPad \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e iOS 14.8 \u0438 iPadOS 14.8. \n\u0412\u043e\u0442 \u043a\u0441\u0442\u0430\u0442\u0438 \u0441\u043a\u0430\u043d\u0435\u0440 \u0435\u0441\u0442\u044c \u043e\u043b\u0438 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \n\u0422\u0430\u043a \u0436\u0435 \u0432\u043e\u0442 \u0441\u0442\u0430\u0442\u044c\u044f \u0441 \u043e\u0431\u044c\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438  , \u0432 \u0430\u0440\u0445\u0438\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0447\u0435\u0442 \u043e \u043d\u0435\u0439 \u0438 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 , \u0435\u0449\u0435 \u0432\u043e\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e\u0431 \u044d\u0442\u043e\u043c \n\n\u0422\u0430\u043a \u0436\u0435 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e Predator, \u043e\u0442 Cytrox\ud83e\uddf2\n\n\u0421\u0430\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cytrox, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u0432 2017 \u0433\u043e\u0434\u0443 \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c \"\u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u0438\u0431\u0435\u0440\u0440\u0435\u0448\u0435\u043d\u0438\u044f\", \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \n\n\u0412 Pitchbook \u0438\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0430\u043a \"\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\" \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432 \"\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u0441\u0431\u043e\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0432 \u0441\u0435\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0441 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0442\u0430\u043a \u0438 \u0438\u0437 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432\"\n\nPredator \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Cytrox \u0438 \u043f\u0440\u043e\u0434\u0430\u043d \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u043d, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0410\u0440\u043c\u0435\u043d\u0438\u044e, \u0413\u0440\u0435\u0446\u0438\u044e \u0438 \u0442\u0434. \n\u041e\u0434\u043d\u0430\u043a\u043e \u043b\u0438\u0446\u0430, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0432\u0448\u0438\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 2021 \u0433\u043e\u0434\u0430, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b. \n\u0426\u0435\u043b\u044c\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u0431\u044b\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439. \n\u0412\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u0441\u044b\u043b\u043a\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u0435 \u0438 \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0443 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u041a\u043e\u0433\u0434\u0430 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0449\u0430\u044f \u0436\u0435\u0440\u0442\u0432\u0430 \u043d\u0430\u0436\u0438\u043c\u0430\u043b\u0430 \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0441\u044f \u043a \u0434\u043e\u043c\u0435\u043d\u0443, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c\u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u043e\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u0441\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442. \n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Alien, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 Predator, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0432\u0443\u043a\u0430, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438 \u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome CVE-2021-38000 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0434\u0440\u0435\u0441\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Samsung \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041f\u043e\u0442\u043e\u043c \u044e\u0437\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome CVE-2021-37973 \u0438 CVE-2021-37976 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \"\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\" \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\ud83e\ude78\n\n#spyware  #cve #exploit #tools", "creation_timestamp": "2023-02-01T04:39:41.000000Z"}, {"uuid": "f5627e07-8eaf-480e-9a39-b92b1c4d4d02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "published-proof-of-concept", "source": "https://t.me/technical_private_cat/378", "content": "What is this spyware for anyway? \ud83e\uddf2\n\nAs we understand it is for surveillance.  \nBut who needs to be spied on and by whom? \n\nWell first of all the government. They need to spy on criminals or terrorists . \nBut besides that, they can use the spyware for other purposes and spy on any political or significant civilians without criminal activity. \nThis software can also be used for military purposes.  In addition to the government, private companies can also use these tools to spy on competitors and the like. \nIt is possible that some governments produce their own tools for targeted digital surveillance, many states buy the sophisticated technology for such surveillance from private companies. \nOf course, such tools may also be useful to some advanced attackers. \nFor example, to spy on and subsequently hack into companies, or individuals. \nUnfortunately, in many cases surveillance software is used not for its intended purpose (to catch criminals), but for the purposes of violating the privacy of ordinary people.\nNevertheless, spyware can be very useful in preventing many crimes\n\u2728\n\nNow let's look at the tools and the exploits \n\nThe first thing we want to talk about is the forcedentry exploit \ud83c\udf4f\n\nWhen analyzing a phone infected with Pegasus . We discovered a zero-day exploit with zero clicks for iMessage. The exploit, called forcedentry, targeted Apple's image rendering library and was effective against Apple iOS, macOS and WatchOS devices. \nThe payload included 27 identical copies of a .gif file, \"which was actually a 748-byte Adobe PSD file,\" with each copy causing IMTranscoderAgent to fail on the device. It also included four different .gif files that were actually \"Adobe PDF files containing a JBIG2 encoded stream.\"\nThis vulnerability has been assigned the number CVE-2021-30860  . \nThis vulnerability uses Apple's image rendering library, CoreGraphics, and does not require user intervention after opening a text message. \nApple has released a patch for this vulnerability: iPhone and iPad users should update to iOS 14.8 and iPadOS 14.8. \n\nHere's a scanner by the way if this vulnerability is on your device \nAlso here is an article explaining the details of this vulnerability , there will be a report about it and its discovery in the archive, also here is a detailed article about it \n\nI also want to tell you about an interesting spyware Predator, from Cytrox\ud83e\uddf2\n\nCytrox itself, founded in 2017 as providing governments with an \"operational cyber solution\" that involves collecting information from devices and cloud services. \n\nPitchbook defines their technology as \"cyber intelligence systems designed to keep governments safe\" and help them \"develop, manage and implement cyber intelligence collection across the network, allowing enterprises to collect intelligence from both endpoint devices and cloud services.\"\n\nPredator is developed by Cytrox and has been sold to the governments of several countries, including Armenia, Greece, etc. \nHowever, the perpetrators of the spyware attacks during 2021 are unknown. \nThe aim of the campaigns was to gain access to Android devices of specific targets. \nIn all cases, a link sent via email was used, mimicking a URL shortening service. When an unsuspecting victim clicked on the link, the browser was connected to a domain controlled by the cybercriminals, from which the malware was downloaded and which then displayed a legitimate site. \n\nWe are talking about the Alien malware, which downloads Predator, an espionage tool. The latter can perform various actions, including recording sound, adding certificates and hiding applications.\nIn August 2021, a zero-day vulnerability in Chrome, CVE-2021-38000 , was used to upload a domain address into the Samsung browser without user input. Then it used Chrome zero-day vulnerability CVE-2021-37973  and CVE-2021-37976  to bypass browser sandbox and download spyware onto the smartphone\ud83e\ude78.\n\n#spyware #browsers #cve #exploit", "creation_timestamp": "2022-12-15T10:04:56.000000Z"}, {"uuid": "b0530a30-2c35-4b6d-8075-6568d874e375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/itsec_news/696", "content": "\u200b\u26a1\ufe0f \u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043f\u044f\u0442\u044c 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome \u0438 Android.\n\n\ud83d\udcac \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 2021 \u0433\u043e\u0434\u0430 \u043e\u0434\u043d\u0430 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 4 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0438 1 \u0432 \u041e\u0421 Android.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Threat Analysis Group \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0437 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u041c\u0430\u043a\u0435\u0434\u043e\u043d\u0438\u0438 Cytrox. \u041e Cytrox \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e, \u0447\u0442\u043e \u0432 \u0438\u044e\u043d\u0435 2021 \u0433\u043e\u0434\u0430 \u0441\u0432\u043e\u0435\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043e\u0439 Predator \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0410\u0439\u043c\u0430\u043d\u0430 \u041d\u0443\u0440\u0430 \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430, \u043f\u043e\u0436\u0435\u043b\u0430\u0432\u0448\u0435\u0433\u043e \u043e\u0441\u0442\u0430\u0442\u044c\u0441\u044f \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c TAG, Cytrox \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f Chrome \u2014 CVE-2021-37973, CVE-2021-37976, CVE-2021-38000 \u0438 CVE-2021-38003 \u0438 1 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f Android CVE-2021-1048. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0442\u0440\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\u0422\u0430\u043a\u0436\u0435 Cytrox \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 n-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0438\u0434\u0438\u043c\u043e, \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cytrox \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442 \u0430\u0442\u0430\u043a\u0438. \u042d\u0442\u043e \u043f\u043b\u043e\u0445\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Google, Apple \u0438 Microsoft, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0441\u043e\u0442\u043d\u044f\u043c\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b TAG \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u044b \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u043e\u043c \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u00ab\u0421\u0435\u043c\u044c \u0438\u0437 \u0434\u0435\u0432\u044f\u0442\u0438 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2021 \u0433\u043e\u0434\u0443 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043d\u0438\u0445 \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c. TAG \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 30 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043f\u0440\u043e\u0434\u0430\u044e\u0449\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u00bb, \u2014 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Google.\n\n#Chrome #Android #0day\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-05-23T12:07:05.000000Z"}, {"uuid": "337945c4-49d5-4336-83ab-645447cae17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/itsec_news/696", "content": "\u200b\u26a1\ufe0f \u0428\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043f\u044f\u0442\u044c 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome \u0438 Android.\n\n\ud83d\udcac \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google, \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 2021 \u0433\u043e\u0434\u0430 \u043e\u0434\u043d\u0430 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u2014 4 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0438 1 \u0432 \u041e\u0421 Android.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Threat Analysis Group \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0438\u0437 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u041c\u0430\u043a\u0435\u0434\u043e\u043d\u0438\u0438 Cytrox. \u041e Cytrox \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e, \u0447\u0442\u043e \u0432 \u0438\u044e\u043d\u0435 2021 \u0433\u043e\u0434\u0430 \u0441\u0432\u043e\u0435\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043e\u0439 Predator \u0433\u0440\u0443\u043f\u043f\u0430 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0430 \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0430 \u0410\u0439\u043c\u0430\u043d\u0430 \u041d\u0443\u0440\u0430 \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u0430, \u043f\u043e\u0436\u0435\u043b\u0430\u0432\u0448\u0435\u0433\u043e \u043e\u0441\u0442\u0430\u0442\u044c\u0441\u044f \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u043c.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c TAG, Cytrox \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f Chrome \u2014 CVE-2021-37973, CVE-2021-37976, CVE-2021-38000 \u0438 CVE-2021-38003 \u0438 1 \u043e\u0448\u0438\u0431\u043a\u0443 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f Android CVE-2021-1048. \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0442\u0440\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\u0422\u0430\u043a\u0436\u0435 Cytrox \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 n-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u0436\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412\u0438\u0434\u0438\u043c\u043e, \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Cytrox \u043d\u0435 \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u0442 \u0430\u0442\u0430\u043a\u0438. \u042d\u0442\u043e \u043f\u043b\u043e\u0445\u0430\u044f \u043d\u043e\u0432\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 Google, Apple \u0438 Microsoft, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0437\u0430\u0449\u0438\u0449\u0430\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0441\u043e\u0442\u043d\u044f\u043c\u0438 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043b\u044e\u0434\u0435\u0439. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b TAG \u043e\u0431\u0435\u0441\u043f\u043e\u043a\u043e\u0435\u043d\u044b \u043d\u0435\u0432\u0435\u0440\u043e\u044f\u0442\u043d\u044b\u043c \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u043e\u043c \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0434\u043e\u0441\u0442\u0438\u0433\u0448\u0438\u0445 \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u00ab\u0421\u0435\u043c\u044c \u0438\u0437 \u0434\u0435\u0432\u044f\u0442\u0438 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2021 \u0433\u043e\u0434\u0443 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043d\u0438\u0445 \u043f\u0440\u043e\u0434\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c. TAG \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 30 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043f\u0440\u043e\u0434\u0430\u044e\u0449\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u00bb, \u2014 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Google.\n\n#Chrome #Android #0day\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-05-23T12:07:05.000000Z"}, {"uuid": "44f73df1-3864-40a4-804e-86808d6a0861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/technical_private_cat/374", "content": "\u0410 \u0434\u043b\u044f \u0447\u0435\u0433\u043e \u044d\u0442\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u0432\u043e\u043e\u0431\u0449\u0435 \u043d\u0443\u0436\u043d\u043e?\ud83e\uddf2\n\n\u041a\u0430\u043a \u043c\u044b \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u043c \u044d\u0442\u043e \u043d\u0443\u0436\u043d\u043e \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438.  \n\u041d\u043e \u0437\u0430 \u043a\u0435\u043c \u0438 \u043a\u043e\u043c\u0443 \u043d\u0443\u0436\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c? \n\n\u041d\u0443 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0443. \u0418\u043c \u043d\u0443\u0436\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438 \u0438\u043b\u0438 \u0442\u0435\u0440\u0440\u043e\u0440\u0438\u0441\u0442\u0430\u043c\u0438 . \n\u041d\u043e \u043a\u0440\u043e\u043c\u0435 \u044d\u0442\u043e\u0433\u043e \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043d\u0435 \u043f\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e \u0438 \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0438 \u0437\u0430  \u043a\u0430\u043a\u0438\u043c\u0438 \u043b\u0438\u0431\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u0438\u043b\u0438 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u043c\u0438 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0441\u043a\u0438\u043c\u0438 \u043b\u0438\u0446\u0430\u043c\u0438 \u0431\u0435\u0437 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 . \n\u0422\u0430\u043a \u0436\u0435 \u044d\u0442\u043e \u041f\u041e \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u043e\u0435\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445.  \u041f\u043e\u043c\u0438\u043c\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430 \u044d\u0442\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 - \u0414\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0437\u0430 \u043a\u0430\u043a\u0438\u043c\u0438 \u043b\u0438\u0431\u043e \u043a\u043e\u043d\u043a\u0443\u0440\u0435\u043d\u0442\u0430\u043c\u0438 \u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u043e\u0433\u043e. \n\u0412\u043f\u043e\u043b\u043d\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0441\u0430\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u044f\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f, \u043c\u043d\u043e\u0433\u0438\u0435 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0430 \u043f\u043e\u043a\u0443\u043f\u0430\u044e\u0442 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0442\u0430\u043a\u043e\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435, \u0443 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439. \n\u041a\u043e\u043d\u0435\u0447\u043d\u043e \u0442\u0430\u043a\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b \u0438 \u043a\u0430\u043a\u0438\u043c \u0442\u043e \u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c . \n\u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443 \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0438 \u0432\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u0432\u0437\u043b\u043e\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 , \u0438\u043b\u0438 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043b\u0438\u0446 . \n\u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u041f\u041e \u0434\u043b\u044f \u0441\u043b\u0435\u0436\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0435 \u043f\u043e \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044e (\u0434\u043b\u044f \u043b\u043e\u0432\u043b\u0438 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 ) , \u0430 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u0435\u0439 \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u044b\u0447\u043d\u044b\u0445 \u043b\u044e\u0434\u0435\u0439\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e \u043e\u0447\u0435\u043d\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u0439 \n\u2728\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c \u0441\u0430\u043c\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \n\n\u041f\u0435\u0440\u0432\u044b\u043c \u0434\u0435\u043b\u043e\u043c \u0445\u043e\u0447\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 forcedentry\ud83c\udf4f\n\n\u041f\u0440\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430, \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u043e\u0433\u043e Pegasus . \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u043a\u043b\u0438\u043a\u043e\u043c \u0434\u043b\u044f iMessage. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043d\u0430\u0437\u0432\u0430\u043b\u0438 forcedentry, \u043e\u043d \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Apple, \u0438 \u0431\u044b\u043b \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u0435\u043d \u043f\u0440\u043e\u0442\u0438\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple iOS, macOS \u0438 WatchOS. \n\u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0430 27 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0444\u0430\u0439\u043b\u0430 \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .gif, \u00ab\u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0431\u044b\u043b 748-\u0431\u0430\u0439\u0442\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c Adobe PSD\u00bb, \u043f\u0440\u0438\u0447\u0435\u043c \u043a\u0430\u0436\u0434\u0430\u044f \u043a\u043e\u043f\u0438\u044f \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0430 \u0441\u0431\u043e\u0439 IMTranscoderAgent \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b \u0447\u0435\u0442\u044b\u0440\u0435 \u0440\u0430\u0437\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u0430 .gif, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0431\u044b\u043b\u0438 \"\u0444\u0430\u0439\u043b\u0430\u043c\u0438 Adobe PDF, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c\u0438 \u043f\u043e\u0442\u043e\u043a \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 JBIG2\".\n\u042d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0438 \u043d\u043e\u043c\u0435\u0440 CVE-2021-30860 . \n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u0435\u043d\u0434\u0435\u0440\u0438\u043d\u0433\u0430 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439 Apple, CoreGraphics, \u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0441\u043b\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f. \nApple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c iPhone \u0438 iPad \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e iOS 14.8 \u0438 iPadOS 14.8. \n\u0412\u043e\u0442 \u043a\u0441\u0442\u0430\u0442\u0438 \u0441\u043a\u0430\u043d\u0435\u0440 \u0435\u0441\u0442\u044c \u043e\u043b\u0438 \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \n\u0422\u0430\u043a \u0436\u0435 \u0432\u043e\u0442 \u0441\u0442\u0430\u0442\u044c\u044f \u0441 \u043e\u0431\u044c\u044f\u0441\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438  , \u0432 \u0430\u0440\u0445\u0438\u0432\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0447\u0435\u0442 \u043e \u043d\u0435\u0439 \u0438 \u0435\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 , \u0435\u0449\u0435 \u0432\u043e\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043e\u0431 \u044d\u0442\u043e\u043c \n\n\u0422\u0430\u043a \u0436\u0435 \u0445\u043e\u0447\u0443 \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u0440\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u041f\u041e Predator, \u043e\u0442 Cytrox\ud83e\uddf2\n\n\u0421\u0430\u043c\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cytrox, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u0432 2017 \u0433\u043e\u0434\u0443 \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c \"\u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043a\u0438\u0431\u0435\u0440\u0440\u0435\u0448\u0435\u043d\u0438\u044f\", \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \n\n\u0412 Pitchbook \u0438\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u0430\u043a \"\u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\" \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0432 \"\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0438 \u0441\u0431\u043e\u0440\u0430 \u043a\u0438\u0431\u0435\u0440\u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0432 \u0441\u0435\u0442\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f\u043c \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u0441 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0442\u0430\u043a \u0438 \u0438\u0437 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432\"\n\nPredator \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Cytrox \u0438 \u043f\u0440\u043e\u0434\u0430\u043d \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0442\u0440\u0430\u043d, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0410\u0440\u043c\u0435\u043d\u0438\u044e, \u0413\u0440\u0435\u0446\u0438\u044e \u0438 \u0442\u0434. \n\u041e\u0434\u043d\u0430\u043a\u043e \u043b\u0438\u0446\u0430, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0432\u0448\u0438\u0435 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 2021 \u0433\u043e\u0434\u0430, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b. \n\u0426\u0435\u043b\u044c\u044e \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u0431\u044b\u043b\u043e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0446\u0435\u043b\u0435\u0439. \n\u0412\u043e \u0432\u0441\u0435\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0441\u0441\u044b\u043b\u043a\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u0435 \u0438 \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0441\u043b\u0443\u0436\u0431\u0443 \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u041a\u043e\u0433\u0434\u0430 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044e\u0449\u0430\u044f \u0436\u0435\u0440\u0442\u0432\u0430 \u043d\u0430\u0436\u0438\u043c\u0430\u043b\u0430 \u043d\u0430 \u0441\u0441\u044b\u043b\u043a\u0443, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0441\u044f \u043a \u0434\u043e\u043c\u0435\u043d\u0443, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u043c\u0443 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u043e\u0441\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b\u0441\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0441\u0430\u0439\u0442. \n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Alien, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 Predator, \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0437\u0432\u0443\u043a\u0430, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438 \u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2021 \u0433\u043e\u0434\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome CVE-2021-38000 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0430\u0434\u0440\u0435\u0441\u0430 \u0434\u043e\u043c\u0435\u043d\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440 Samsung \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041f\u043e\u0442\u043e\u043c \u044e\u0437\u0430\u043b\u0430\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Chrome CVE-2021-37973 \u0438 CVE-2021-37976 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \"\u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b\" \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u043d\u0430 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\ud83e\ude78\n\n#spyware  #cve #exploit #tools", "creation_timestamp": "2023-02-01T04:39:41.000000Z"}, {"uuid": "9e3986db-59f7-4944-bdbb-e01f2acc0a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "published-proof-of-concept", "source": "https://t.me/technical_private_cat/378", "content": "What is this spyware for anyway? \ud83e\uddf2\n\nAs we understand it is for surveillance.  \nBut who needs to be spied on and by whom? \n\nWell first of all the government. They need to spy on criminals or terrorists . \nBut besides that, they can use the spyware for other purposes and spy on any political or significant civilians without criminal activity. \nThis software can also be used for military purposes.  In addition to the government, private companies can also use these tools to spy on competitors and the like. \nIt is possible that some governments produce their own tools for targeted digital surveillance, many states buy the sophisticated technology for such surveillance from private companies. \nOf course, such tools may also be useful to some advanced attackers. \nFor example, to spy on and subsequently hack into companies, or individuals. \nUnfortunately, in many cases surveillance software is used not for its intended purpose (to catch criminals), but for the purposes of violating the privacy of ordinary people.\nNevertheless, spyware can be very useful in preventing many crimes\n\u2728\n\nNow let's look at the tools and the exploits \n\nThe first thing we want to talk about is the forcedentry exploit \ud83c\udf4f\n\nWhen analyzing a phone infected with Pegasus . We discovered a zero-day exploit with zero clicks for iMessage. The exploit, called forcedentry, targeted Apple's image rendering library and was effective against Apple iOS, macOS and WatchOS devices. \nThe payload included 27 identical copies of a .gif file, \"which was actually a 748-byte Adobe PSD file,\" with each copy causing IMTranscoderAgent to fail on the device. It also included four different .gif files that were actually \"Adobe PDF files containing a JBIG2 encoded stream.\"\nThis vulnerability has been assigned the number CVE-2021-30860  . \nThis vulnerability uses Apple's image rendering library, CoreGraphics, and does not require user intervention after opening a text message. \nApple has released a patch for this vulnerability: iPhone and iPad users should update to iOS 14.8 and iPadOS 14.8. \n\nHere's a scanner by the way if this vulnerability is on your device \nAlso here is an article explaining the details of this vulnerability , there will be a report about it and its discovery in the archive, also here is a detailed article about it \n\nI also want to tell you about an interesting spyware Predator, from Cytrox\ud83e\uddf2\n\nCytrox itself, founded in 2017 as providing governments with an \"operational cyber solution\" that involves collecting information from devices and cloud services. \n\nPitchbook defines their technology as \"cyber intelligence systems designed to keep governments safe\" and help them \"develop, manage and implement cyber intelligence collection across the network, allowing enterprises to collect intelligence from both endpoint devices and cloud services.\"\n\nPredator is developed by Cytrox and has been sold to the governments of several countries, including Armenia, Greece, etc. \nHowever, the perpetrators of the spyware attacks during 2021 are unknown. \nThe aim of the campaigns was to gain access to Android devices of specific targets. \nIn all cases, a link sent via email was used, mimicking a URL shortening service. When an unsuspecting victim clicked on the link, the browser was connected to a domain controlled by the cybercriminals, from which the malware was downloaded and which then displayed a legitimate site. \n\nWe are talking about the Alien malware, which downloads Predator, an espionage tool. The latter can perform various actions, including recording sound, adding certificates and hiding applications.\nIn August 2021, a zero-day vulnerability in Chrome, CVE-2021-38000 , was used to upload a domain address into the Samsung browser without user input. Then it used Chrome zero-day vulnerability CVE-2021-37973  and CVE-2021-37976  to bypass browser sandbox and download spyware onto the smartphone\ud83e\ude78.\n\n#spyware #browsers #cve #exploit", "creation_timestamp": "2022-12-15T10:04:56.000000Z"}, {"uuid": "cecaa170-b44e-4520-abb8-5d95839aba86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "Telegram/aLoHEeC0s6CTRtjstMCi0uHcWUpM42aTPK8QGY-AhH0YUYo9", "content": "", "creation_timestamp": "2025-02-06T02:39:17.000000Z"}, {"uuid": "4ddc50b9-af0a-4110-bdd6-3083c1afa5ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/arpsyndicate/1194", "content": "#ExploitObserverAlert\n\nCVE-2021-37975\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2021-37975. Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\nFIRST-EPSS: 0.077650000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-04T11:43:10.000000Z"}, {"uuid": "c5aaa313-257e-42ee-aaee-e313d7e945b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "https://t.me/arpsyndicate/1418", "content": "#ExploitObserverAlert\n\nCVE-2021-37973\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2021-37973. Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.\n\nFIRST-EPSS: 0.005550000\nNVD-IS: 6.0\nNVD-ES: 2.8", "creation_timestamp": "2023-12-05T07:12:01.000000Z"}, {"uuid": "5d5d345b-fa00-4fea-87c8-61e840d5cdfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/wwm76/366", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\nhttps://t.me/wwm76\n\u0fd0\ufeb3\u0640\ufb51\u05dd\u0640\u0640\u0640\u0696 \ufe82\ufedf\u0640\u06f6\u0640\u06a3\u064a\u0640\u065b\u0696\u064a\u0fd0\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2022-10-01T08:17:14.000000Z"}, {"uuid": "9df0315f-508a-4a76-bc5a-8d315ee02759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/wwm76/366", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\nhttps://t.me/wwm76\n\u0fd0\ufeb3\u0640\ufb51\u05dd\u0640\u0640\u0640\u0696 \ufe82\ufedf\u0640\u06f6\u0640\u06a3\u064a\u0640\u065b\u0696\u064a\u0fd0\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2022-10-01T08:17:14.000000Z"}, {"uuid": "b006c99b-1456-4324-a6a1-b8d0a447c16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/wwm76/366", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\nhttps://t.me/wwm76\n\u0fd0\ufeb3\u0640\ufb51\u05dd\u0640\u0640\u0640\u0696 \ufe82\ufedf\u0640\u06f6\u0640\u06a3\u064a\u0640\u065b\u0696\u064a\u0fd0\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2022-10-01T08:17:14.000000Z"}, {"uuid": "bb3f4dab-1ef0-4e12-9e2d-81f46bbe59b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/63", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T18:15:53.000000Z"}, {"uuid": "c816b6c4-b0b2-4f99-a97e-483bb7fc9460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/63", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T18:15:53.000000Z"}, {"uuid": "484f9fa2-a8be-4cfc-823e-4de48ed2d6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/63", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T18:15:53.000000Z"}, {"uuid": "b1e9a688-9a08-4d5e-b0a0-36a14a70ea7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/hacker_trick/310", "content": "Chrome in-the-wild bug analysis CVE-2021-37975\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975", "creation_timestamp": "2021-10-20T19:44:57.000000Z"}, {"uuid": "22b4fd5d-9952-47b3-a67e-bde14c15fae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://t.me/true_secator/2167", "content": "\u200b\u200bGoogle, \u043f\u043e\u0445\u043e\u0436\u0435, \u0440\u0435\u0448\u0438\u043b\u0438 \u0434\u043e\u0433\u043d\u0430\u0442\u044c Microsoft \u0432 \u0447\u0430\u0441\u0442\u0438 \u043a\u0430\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u043e\u043b\u0438\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043a\u0430\u043a \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0443\u0436\u0435 \u0434\u0432\u0430 0-day. \u0418 \u043e\u0431\u0430, \u0447\u0442\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 Google, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043d\u0435 \u0434\u0430\u044e\u0442, \u043e\u0434\u043d\u0430\u043a\u043e, \u0441\u0443\u0434\u044f \u043f\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043a\u0443\u0434\u043d\u043e\u043c\u0443 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e, CVE-2021-37976 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0441\u0440\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2021-37975, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a UAF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c (Use After Free). \u0422\u0430\u043a\u0438\u0435 \u0434\u044b\u0440\u043a\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u041f\u043e-\u043f\u0430\u0446\u0430\u043d\u0441\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0430\u044f\u0441\u044c - \u0430\u0442\u0430\u0441.\n\n\u0414\u043e \u043a\u0443\u0447\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0435\u0449\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-37974, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u043e\u0436\u0435 \u0432\u0440\u043e\u0434\u0435 \u043a\u0430\u043a 0-day \u0438 UAF, \u043d\u043e \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, Google \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0437\u0430\u043a\u0440\u044b\u043b\u0438, \u0435\u0441\u043b\u0438 \u043d\u0430\u043c \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u043a\u043b\u0435\u0440\u043e\u0437, \u0447\u0435\u0442\u044b\u0440\u043d\u0430\u0434\u0446\u0430\u0442\u044c 0-day \u0432 Chrome. \u0412\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442.\n\n\u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Chrome, \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f.\n\n- \u0414\u044b\u0440\u043a\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0435?\n- \u041d\u0435\u0442, \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u043b\u0430\u0435\u043c.\n- \u041a\u0440\u0430\u0441\u0438\u0432\u043e\u0435!", "creation_timestamp": "2021-10-01T08:56:19.000000Z"}, {"uuid": "6e0965c7-ccf3-4fe0-9565-02c7df75a447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/true_secator/2167", "content": "\u200b\u200bGoogle, \u043f\u043e\u0445\u043e\u0436\u0435, \u0440\u0435\u0448\u0438\u043b\u0438 \u0434\u043e\u0433\u043d\u0430\u0442\u044c Microsoft \u0432 \u0447\u0430\u0441\u0442\u0438 \u043a\u0430\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u043e\u043b\u0438\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043a\u0430\u043a \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0443\u0436\u0435 \u0434\u0432\u0430 0-day. \u0418 \u043e\u0431\u0430, \u0447\u0442\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 Google, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043d\u0435 \u0434\u0430\u044e\u0442, \u043e\u0434\u043d\u0430\u043a\u043e, \u0441\u0443\u0434\u044f \u043f\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043a\u0443\u0434\u043d\u043e\u043c\u0443 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e, CVE-2021-37976 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0441\u0440\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2021-37975, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a UAF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c (Use After Free). \u0422\u0430\u043a\u0438\u0435 \u0434\u044b\u0440\u043a\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u041f\u043e-\u043f\u0430\u0446\u0430\u043d\u0441\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0430\u044f\u0441\u044c - \u0430\u0442\u0430\u0441.\n\n\u0414\u043e \u043a\u0443\u0447\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0435\u0449\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-37974, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u043e\u0436\u0435 \u0432\u0440\u043e\u0434\u0435 \u043a\u0430\u043a 0-day \u0438 UAF, \u043d\u043e \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, Google \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0437\u0430\u043a\u0440\u044b\u043b\u0438, \u0435\u0441\u043b\u0438 \u043d\u0430\u043c \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u043a\u043b\u0435\u0440\u043e\u0437, \u0447\u0435\u0442\u044b\u0440\u043d\u0430\u0434\u0446\u0430\u0442\u044c 0-day \u0432 Chrome. \u0412\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442.\n\n\u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Chrome, \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f.\n\n- \u0414\u044b\u0440\u043a\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0435?\n- \u041d\u0435\u0442, \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u043b\u0430\u0435\u043c.\n- \u041a\u0440\u0430\u0441\u0438\u0432\u043e\u0435!", "creation_timestamp": "2021-10-01T08:56:19.000000Z"}, {"uuid": "91e78583-610d-4739-b3bc-105f00932286", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37978", "type": "seen", "source": "https://t.me/true_secator/2199", "content": "\u041f\u0443\u043b\u0435\u043c\u0435\u0442\u043d\u043e\u0439 \u043e\u0447\u0435\u0440\u0435\u0434\u044c\u044e Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445. \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome \u0434\u043b\u044f Windows, Mac \u0438 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n \n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2021-37977 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u043c\u0443\u0441\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0430 \u0449\u0435\u0434\u0440\u044b\u0439 Google \u043f\u043e\u043e\u0449\u0440\u0438\u043b \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0432 10 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-37978 \u0438 CVE-2021-37979 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Blink \u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 WebRTC, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u0417\u0430 \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 Google, \u0440\u0430\u0437\u0434\u0430\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u042f\u043d\u043a\u0430\u043d\u0443 \u0438\u0437 360 ATA \u0438 \u041c\u0430\u0440\u0447\u0438\u043d\u0443 \u0422\u043e\u0432\u0430\u043b\u044c\u0441\u043a\u0438 \u0438\u0437 Cisco Talos \u043f\u043e 7500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome CVE-2021-37980 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b (sandbox). \u0417\u0430 \u044d\u0442\u0443 \u0431\u0430\u0433\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0401\u043d\u0445\u0432\u0438 \u0414\u0436\u0438\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0431\u043e\u043d\u0443\u0441 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 3000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 Google \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c, \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0421\u043e \u0441\u043b\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0444\u0430\u043a\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u043d\u043e \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.", "creation_timestamp": "2021-10-11T12:40:00.000000Z"}, {"uuid": "74bad2b5-354b-4b98-a01d-497236443030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37977", "type": "seen", "source": "https://t.me/true_secator/2199", "content": "\u041f\u0443\u043b\u0435\u043c\u0435\u0442\u043d\u043e\u0439 \u043e\u0447\u0435\u0440\u0435\u0434\u044c\u044e Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445. \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome \u0434\u043b\u044f Windows, Mac \u0438 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n \n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2021-37977 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u043c\u0443\u0441\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0430 \u0449\u0435\u0434\u0440\u044b\u0439 Google \u043f\u043e\u043e\u0449\u0440\u0438\u043b \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0432 10 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-37978 \u0438 CVE-2021-37979 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Blink \u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 WebRTC, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u0417\u0430 \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 Google, \u0440\u0430\u0437\u0434\u0430\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u042f\u043d\u043a\u0430\u043d\u0443 \u0438\u0437 360 ATA \u0438 \u041c\u0430\u0440\u0447\u0438\u043d\u0443 \u0422\u043e\u0432\u0430\u043b\u044c\u0441\u043a\u0438 \u0438\u0437 Cisco Talos \u043f\u043e 7500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome CVE-2021-37980 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b (sandbox). \u0417\u0430 \u044d\u0442\u0443 \u0431\u0430\u0433\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0401\u043d\u0445\u0432\u0438 \u0414\u0436\u0438\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0431\u043e\u043d\u0443\u0441 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 3000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 Google \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c, \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0421\u043e \u0441\u043b\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0444\u0430\u043a\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u043d\u043e \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.", "creation_timestamp": "2021-10-11T12:40:00.000000Z"}, {"uuid": "2b3d7350-4078-41c6-9848-eb969436e46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37979", "type": "seen", "source": "https://t.me/true_secator/2199", "content": "\u041f\u0443\u043b\u0435\u043c\u0435\u0442\u043d\u043e\u0439 \u043e\u0447\u0435\u0440\u0435\u0434\u044c\u044e Google \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445. \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome \u0434\u043b\u044f Windows, Mac \u0438 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n \n\u0421\u0430\u043c\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2021-37977 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0438 \u043c\u0443\u0441\u043e\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u0430 \u0449\u0435\u0434\u0440\u044b\u0439 Google \u043f\u043e\u043e\u0449\u0440\u0438\u043b \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u0435\u043c \u0432 10 000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2021-37978 \u0438 CVE-2021-37979 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u043c \u0434\u0432\u0438\u0436\u043a\u0435 Blink \u0438 \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 WebRTC, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u0417\u0430 \u044d\u0442\u0438 \u0431\u0430\u0433\u0438 Google, \u0440\u0430\u0437\u0434\u0430\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u042f\u043d\u043a\u0430\u043d\u0443 \u0438\u0437 360 ATA \u0438 \u041c\u0430\u0440\u0447\u0438\u043d\u0443 \u0422\u043e\u0432\u0430\u043b\u044c\u0441\u043a\u0438 \u0438\u0437 Cisco Talos \u043f\u043e 7500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u0427\u0435\u0442\u0432\u0435\u0440\u0442\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Chrome CVE-2021-37980 \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b (sandbox). \u0417\u0430 \u044d\u0442\u0443 \u0431\u0430\u0433\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0401\u043d\u0445\u0432\u0438 \u0414\u0436\u0438\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0431\u043e\u043d\u0443\u0441 \u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u0435 3000 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432.\n \n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u043e\u0448\u0438\u0431\u043a\u0430\u0445 \u0432 Google \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c, \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0439 \u0433\u0438\u0433\u0430\u043d\u0442 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435. \u0421\u043e \u0441\u043b\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0444\u0430\u043a\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e, \u043d\u043e \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0435\u0442\u0438 \u0443\u0436\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b.", "creation_timestamp": "2021-10-11T12:40:00.000000Z"}, {"uuid": "8561634c-87a2-4e0f-98b0-68b14fe2470b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37974", "type": "seen", "source": "https://t.me/true_secator/2167", "content": "\u200b\u200bGoogle, \u043f\u043e\u0445\u043e\u0436\u0435, \u0440\u0435\u0448\u0438\u043b\u0438 \u0434\u043e\u0433\u043d\u0430\u0442\u044c Microsoft \u0432 \u0447\u0430\u0441\u0442\u0438 \u043a\u0430\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043a\u043e\u043b\u0438\u043a\u0447\u0435\u0441\u0442\u0432\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043d\u0435 \u043f\u0440\u043e\u0448\u043b\u043e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043a\u0430\u043a \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0443\u0436\u0435 \u0434\u0432\u0430 0-day. \u0418 \u043e\u0431\u0430, \u0447\u0442\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u043e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 Google, \u043a\u0430\u043a \u043e\u0431\u044b\u0447\u043d\u043e, \u043d\u0435 \u0434\u0430\u044e\u0442, \u043e\u0434\u043d\u0430\u043a\u043e, \u0441\u0443\u0434\u044f \u043f\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u043a\u0443\u0434\u043d\u043e\u043c\u0443 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044e, CVE-2021-37976 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0443\u0442\u0435\u0447\u043a\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u044f\u0434\u0440\u0435 \u0438 \u0438\u043c\u0435\u0435\u0442 \u0441\u0440\u0435\u0434\u043d\u044e\u044e \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438. \u0412\u0442\u043e\u0440\u0430\u044f \u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430, CVE-2021-37975, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a UAF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c (Use After Free). \u0422\u0430\u043a\u0438\u0435 \u0434\u044b\u0440\u043a\u0438 \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430. \u041f\u043e-\u043f\u0430\u0446\u0430\u043d\u0441\u043a\u0438 \u0432\u044b\u0440\u0430\u0436\u0430\u044f\u0441\u044c - \u0430\u0442\u0430\u0441.\n\n\u0414\u043e \u043a\u0443\u0447\u0438 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u0435\u0449\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2021-37974, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u043e\u0436\u0435 \u0432\u0440\u043e\u0434\u0435 \u043a\u0430\u043a 0-day \u0438 UAF, \u043d\u043e \u043d\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, Google \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 \u0433\u043e\u0434\u0430 \u0437\u0430\u043a\u0440\u044b\u043b\u0438, \u0435\u0441\u043b\u0438 \u043d\u0430\u043c \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u044f\u0435\u0442 \u0441\u043a\u043b\u0435\u0440\u043e\u0437, \u0447\u0435\u0442\u044b\u0440\u043d\u0430\u0434\u0446\u0430\u0442\u044c 0-day \u0432 Chrome. \u0412\u043f\u0435\u0447\u0430\u0442\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442.\n\n\u0412\u0441\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 Chrome, \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f.\n\n- \u0414\u044b\u0440\u043a\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0435?\n- \u041d\u0435\u0442, \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u0435\u043b\u0430\u0435\u043c.\n- \u041a\u0440\u0430\u0441\u0438\u0432\u043e\u0435!", "creation_timestamp": "2021-10-01T08:56:19.000000Z"}, {"uuid": "2f0b53b8-a4bc-45a4-89ae-8679d309903b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/true_secator/2147", "content": "Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome 94.0.4606.61 \u0434\u043b\u044f Windows, Mac \u0438 Linux, \u043f\u0440\u0438\u0447\u0438\u043d\u043e\u0439 \u0441\u0442\u0430\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 CVE-2021-37973 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 Portals, \u043d\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430\u0432\u0438\u0433\u0430\u0446\u0438\u0438 \u043f\u043e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c Google \u0434\u043b\u044f Chrome. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438 Chrome.\n\n\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2021-37973 \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u043e \u0441\u0430\u043c\u0438\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c. \u042d\u0442\u043e \u0443\u0436\u0435 11 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2021 \u0433\u043e\u0434\u0430.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e Google \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2021-37973 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f.\n\n\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u0442\u0430\u043b\u044f\u043c \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u044f\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043a\u0430 \u0434\u044b\u0440\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435, \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b.\n\n\u041d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043d\u0435 \u0434\u043e\u0436\u0438\u0434\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u0438 \u043d\u0430\u043a\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Google Chrome, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0441\u0442\u0430\u0442\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b.", "creation_timestamp": "2021-09-27T15:05:00.000000Z"}, {"uuid": "07393a5f-b2d6-418f-8b13-edee9b0229e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/true_secator/2972", "content": "Google TAG \u0432\u0441\u0435\u0440\u044c\u0435\u0437 \u0432\u0437\u044f\u043b\u0430\u0441\u044c \u0437\u0430 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430\u0441\u044c, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 30 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0442\u0435\u0445, \u043a\u0442\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u0438\u044e\u043b\u0435 2021 \u0433\u043e\u0434\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome, Internet Explorer \u0438 WebKit (Safari) \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u043c Google (TAG) \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u041f\u041e Predator, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 Android. \n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Google, \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 Predator \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u044f\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome \u0438 Android.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0442\u0440\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Predator.\n\n\u0412 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2021 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c HTTP-\u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 SBrowser \u0438\u0437 Chrome (CVE-2021-38000), \u0432 \u0432\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome (CVE-2021-37973, CVE-2021-37976), \u0430 \u0432 \u0445\u043e\u0434\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 (\u043e\u043a\u0442\u044f\u0431\u0440\u044c 2021 \u0433\u043e\u0434\u0430) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 Android 0-day (CVE-2021-38003, CVE-2021-1048).\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Android \u043f\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u043c\u0435\u043d, \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Android-\u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 Predator \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u043b\u0438 \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c RAT-\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0430 Android Alien. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u044f Predator \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0443 \u041f\u041e \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0443\u0434\u0438\u043e, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e CA-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438 \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u0412\u0441\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u044b\u043b\u0438 \u0443\u0437\u043a\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u044b \u043f\u043e \u0446\u0435\u043b\u044f\u043c \u0438 \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google, \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Predator \u0441\u0442\u043e\u0438\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cytrox, \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0415\u0433\u0438\u043f\u0442\u0430, \u0410\u0440\u043c\u0435\u043d\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u041c\u0430\u0434\u0430\u0433\u0430\u0441\u043a\u0430\u0440\u0430, \u041a\u043e\u0442-\u0434'\u0418\u0432\u0443\u0430\u0440\u0430, \u0421\u0435\u0440\u0431\u0438\u0438, \u0418\u0441\u043f\u0430\u043d\u0438\u0438 \u0438 \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438. \u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0438\u043c\u0438 \u0434\u043b\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043d\u0435\u0443\u0433\u043e\u0434\u043d\u044b\u043c\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u0435\u0439.\n\n\u041e\u0434\u043d\u0438\u043c \u0438\u0437 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u043b \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u0438\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0410\u0439\u043c\u0430\u043d \u041d\u0443\u0440\u0430, \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u043c\u0438\u043c\u043e Predator \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d Pegasus \u043e\u0442 NSO Group. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2021 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 CitizenLab \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0441\u044f \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e.\n\n\u041a\u0430\u043a \u043f\u043e\u043c\u043d\u0438\u0442\u044c\u0441\u044f NSO Group \u043f\u043e\u0441\u043b\u0435 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0435\u043d\u0438\u0439 \u0441\u0442\u0430\u043b\u0430 \u0444\u0438\u0433\u0443\u0440\u0430\u043d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0445 \u043f\u0440\u0435\u0442\u0435\u043d\u0437\u0438\u0439 \u0438 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u0438\u0448\u0438\u043b\u0430\u0441\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u044b, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0434\u043e\u0448\u043b\u0430 \u0438 \u0434\u043e Cytrox, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043c\u0438\u043c\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u0440\u044f\u043b\u0430 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0440\u0438\u0441\u043a\u0443\u0435\u0442 \u0440\u0430\u0441\u0442\u0435\u0440\u044f\u0442\u044c \u0438 \u043d\u0430\u043f\u0443\u0433\u0430\u043d\u043d\u0443\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u0443.", "creation_timestamp": "2022-05-24T12:49:45.000000Z"}, {"uuid": "7c317322-5b9c-42d1-9714-833bb624f17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/true_secator/2972", "content": "Google TAG \u0432\u0441\u0435\u0440\u044c\u0435\u0437 \u0432\u0437\u044f\u043b\u0430\u0441\u044c \u0437\u0430 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430\u0441\u044c, \u0447\u0442\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 30 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u041f\u041e, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0442\u0435\u0445, \u043a\u0442\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0435 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432.\n\n\u041f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u0438\u044e\u043b\u0435 2021 \u0433\u043e\u0434\u0430 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome, Internet Explorer \u0438 WebKit (Safari) \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0430\u043c Google (TAG) \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0432\u044b\u0439\u0442\u0438 \u043d\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u041f\u041e Predator, \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 Android. \n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Google, \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u043e\u0432 Predator \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043f\u044f\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Chrome \u0438 Android.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0442\u0440\u0438 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Predator.\n\n\u0412 \u0441\u0430\u043c\u043e\u0439 \u043f\u0435\u0440\u0432\u043e\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2021 \u0433\u043e\u0434\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c HTTP-\u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 SBrowser \u0438\u0437 Chrome (CVE-2021-38000), \u0432 \u0432\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u0438\u0437 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b Chrome (CVE-2021-37973, CVE-2021-37976), \u0430 \u0432 \u0445\u043e\u0434\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 (\u043e\u043a\u0442\u044f\u0431\u0440\u044c 2021 \u0433\u043e\u0434\u0430) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0430\u0441\u044c \u043f\u043e\u043b\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 Android 0-day (CVE-2021-38003, CVE-2021-1048).\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0435 \u0441\u0441\u044b\u043b\u043a\u0438, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Android \u043f\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u0435. \u041f\u043e\u0441\u043b\u0435 \u043a\u043b\u0438\u043a\u0430 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u043d\u0430 \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u043c\u0435\u043d, \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u043b \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0432\u0435\u0431-\u0441\u0430\u0439\u0442.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 Android-\u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442\u0430 Predator \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u043b\u0438 \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c RAT-\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0430 Android Alien. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u044f Predator \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u043b\u0430 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0443 \u041f\u041e \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0443\u0434\u0438\u043e, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e CA-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438 \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u0412\u0441\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0431\u044b\u043b\u0438 \u0443\u0437\u043a\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u044b \u043f\u043e \u0446\u0435\u043b\u044f\u043c \u0438 \u0444\u043e\u043a\u0443\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0435 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 \u0434\u0435\u0441\u044f\u0442\u043a\u0430\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Google, \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Predator \u0441\u0442\u043e\u0438\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cytrox, \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0415\u0433\u0438\u043f\u0442\u0430, \u0410\u0440\u043c\u0435\u043d\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u041c\u0430\u0434\u0430\u0433\u0430\u0441\u043a\u0430\u0440\u0430, \u041a\u043e\u0442-\u0434'\u0418\u0432\u0443\u0430\u0440\u0430, \u0421\u0435\u0440\u0431\u0438\u0438, \u0418\u0441\u043f\u0430\u043d\u0438\u0438 \u0438 \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438. \u0412\u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438\u0441\u044c \u0438\u043c\u0438 \u0434\u043b\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043d\u0435\u0443\u0433\u043e\u0434\u043d\u044b\u043c\u0438 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0436\u0443\u0440\u043d\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0438 \u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u0435\u0439.\n\n\u041e\u0434\u043d\u0438\u043c \u0438\u0437 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u043b \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u0438\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0410\u0439\u043c\u0430\u043d \u041d\u0443\u0440\u0430, \u0432 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u043e\u043c\u0438\u043c\u043e Predator \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d Pegasus \u043e\u0442 NSO Group. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2021 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 CitizenLab \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0441\u044f \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431 \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e.\n\n\u041a\u0430\u043a \u043f\u043e\u043c\u043d\u0438\u0442\u044c\u0441\u044f NSO Group \u043f\u043e\u0441\u043b\u0435 \u0432\u0441\u0435\u0445 \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0435\u043d\u0438\u0439 \u0441\u0442\u0430\u043b\u0430 \u0444\u0438\u0433\u0443\u0440\u0430\u043d\u0442\u043e\u043c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0445 \u043f\u0440\u0435\u0442\u0435\u043d\u0437\u0438\u0439 \u0438 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043b\u0438\u0448\u0438\u043b\u0430\u0441\u044c \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u044b, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0434\u043e\u0448\u043b\u0430 \u0438 \u0434\u043e Cytrox, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043c\u0438\u043c\u043e \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u0440\u044f\u043b\u0430 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0435 \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0440\u0438\u0441\u043a\u0443\u0435\u0442 \u0440\u0430\u0441\u0442\u0435\u0440\u044f\u0442\u044c \u0438 \u043d\u0430\u043f\u0443\u0433\u0430\u043d\u043d\u0443\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u0443.", "creation_timestamp": "2022-05-24T12:49:45.000000Z"}, {"uuid": "76726f08-4aef-40f6-b71f-c8361b615cef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "https://t.me/NeKaspersky/1263", "content": "2021 \u0433\u043e\u0434 \u0441\u0442\u0430\u043b \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u044b\u043c \u043f\u043e \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u0441 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \n\n\u0412\u043e\u0442 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome \u0438\u0437-\u0437\u0430 0-day, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0430\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f. \u0421\u0442\u043e\u0438\u043b\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0435\u0431\u044f\u0442\u0430\u043c \u0438\u0437 \u0413\u0443\u0433\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432 Portals, \u043a\u0430\u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u043d\u043e\u0432\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2021-37973, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445 \u0441 Chrome. \n\n\u0412 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0434\u0430\u0436\u0435 \u0441\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0434\u043b\u044f CVE-2021-37973. \u0418 \u043f\u043e \u0438\u0442\u043e\u0433\u0443 \u0441 \u043d\u0430\u0447\u0430\u043b\u0430 2021 \u044d\u0442\u0430 zero-day 11 \u043f\u043e \u0441\u0447\u0435\u0442\u0443 \u0432 Chrome. \n\n\u041c\u044b \u0432 \u0442\u0430\u043a\u0438\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u0441\u044f \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044e \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c. \u0415\u0441\u043b\u0438 \u043d\u0435 \u0445\u043e\u0442\u0438\u0442\u0435 \u0432\u0438\u043d\u0438\u0442\u044c \u0440\u0435\u0442\u0440\u043e\u0433\u0440\u0430\u0434\u043d\u044b\u0439 \u041c\u0435\u0440\u043a\u0443\u0440\u0438\u0439, \u043a\u043e\u0433\u0434\u0430 \u0432\u0430\u0441 \u0432\u0437\u043b\u043e\u043c\u0430\u044e\u0442, \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435\u0441\u044c \u0442\u043e\u0436\u0435.", "creation_timestamp": "2022-11-11T03:23:20.000000Z"}, {"uuid": "8b460cd0-ee73-4aca-b8a3-86d3fd2a1388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37979", "type": "seen", "source": "https://t.me/cibsecurity/31654", "content": "\u203c CVE-2021-37979 \u203c\n\nheap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-02T23:23:12.000000Z"}, {"uuid": "92758532-da96-40ac-aa4e-af03e52dc7bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37978", "type": "seen", "source": "https://t.me/cibsecurity/31648", "content": "\u203c CVE-2021-37978 \u203c\n\nHeap buffer overflow in Blink in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-02T23:23:00.000000Z"}, {"uuid": "b4cabf62-3a74-4fe6-9746-bb51ca644ba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37977", "type": "seen", "source": "https://t.me/cibsecurity/31655", "content": "\u203c CVE-2021-37977 \u203c\n\nUse after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-02T23:23:15.000000Z"}, {"uuid": "90241e6b-de69-4157-91e7-fc13d56043e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3797", "type": "seen", "source": "https://t.me/cibsecurity/28880", "content": "\u203c CVE-2021-3797 \u203c\n\nhestiacp is vulnerable to Use of Wrong Operator in String Comparison\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-15T16:22:22.000000Z"}, {"uuid": "f9e30795-10f1-4744-8be2-8e473744d132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/1279", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T16:16:30.000000Z"}, {"uuid": "dc442d36-afb1-4558-bc7c-d85944d81a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/1279", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T16:16:30.000000Z"}, {"uuid": "03d1f46c-5d8d-4774-9e97-e4beb6f1b45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/MH_HACKING_termux/1279", "content": "\u0642\u0645 \u0628\u062a\u062d\u062f\u064a\u062b Google Chrome \u0641\u064a \u0623\u0633\u0631\u0639 \u0648\u0642\u062a \u0645\u0645\u0643\u0646 \u0644\u062a\u0635\u062d\u064a\u062d 2 \u0639\u064a\u0648\u0628 Zero-Day \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637\n\u062c\u0648\u062c\u0644 \u0643\u0631\u0648\u0645\n\u062f\u0641\u0639\u062a Google \u064a\u0648\u0645 \u0627\u0644\u062e\u0645\u064a\u0633 \u0625\u0644\u0649 \u0625\u0635\u0644\u0627\u062d\u0627\u062a \u0623\u0645\u0646\u064a\u0629 \u0639\u0627\u062c\u0644\u0629 \u0644\u0645\u062a\u0635\u0641\u062d\u0647\u0627 Chrome \u060c \u0628\u0645\u0627 \u0641\u064a \u0630\u0644\u0643 \u0632\u0648\u062c \u0645\u0646 \u0646\u0642\u0627\u0637 \u0627\u0644\u0636\u0639\u0641 \u0627\u0644\u0623\u0645\u0646\u064a\u0629 \u0627\u0644\u062c\u062f\u064a\u062f\u0629 \u0627\u0644\u062a\u064a \u0642\u0627\u0644\u062a \u0627\u0644\u0634\u0631\u0643\u0629 \u0625\u0646\u0647 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \u060c \u0645\u0645\u0627 \u064a\u062c\u0639\u0644\u0647\u0627 \u0631\u0627\u0628\u0639 \u0648\u062e\u0627\u0645\u0633 \u0623\u064a\u0627\u0645 \u0627\u0644\u0635\u0641\u0631 \u0627\u0644\u0646\u0634\u0637\u0629 \u062e\u0644\u0627\u0644 \u0647\u0630\u0627 \u0627\u0644\u0634\u0647\u0631 \u0648\u062d\u062f\u0647.\n\n\u062a\u0639\u062f \u0627\u0644\u0645\u0634\u0643\u0644\u0627\u062a \u060c \u0627\u0644\u0645\u0639\u064a\u0646\u0629 \u0628\u0640 CVE-2021-37975 \u0648 CVE-2021-37976 \u060c \u062c\u0632\u0621\u064b\u0627 \u0645\u0646 \u0625\u062c\u0645\u0627\u0644\u064a \u0623\u0631\u0628\u0639\u0629 \u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0648\u062a\u062a\u0639\u0644\u0642 \u0628\u0639\u064a\u0628 \u062e\u0627\u0644\u064d \u0645\u0646 \u0627\u0644\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0641\u064a \u0645\u062d\u0631\u0643 V8 JavaScript \u0648 WebAssembly \u0628\u0627\u0644\u0625\u0636\u0627\u0641\u0629 \u0625\u0644\u0649 \u062a\u0633\u0631\u0628 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0641\u064a \u0627\u0644\u0646\u0648\u0627\u0629.\n\n\u0643\u0645\u0627 \u0647\u0648 \u0627\u0644\u062d\u0627\u0644 \u0639\u0627\u062f\u0629\u064b \u060c \u0627\u0645\u062a\u0646\u0639 \u0639\u0645\u0644\u0627\u0642 \u0627\u0644\u062a\u0643\u0646\u0648\u0644\u0648\u062c\u064a\u0627 \u0639\u0646 \u0645\u0634\u0627\u0631\u0643\u0629 \u0623\u064a \u062a\u0641\u0627\u0635\u064a\u0644 \u0625\u0636\u0627\u0641\u064a\u0629 \u0628\u0634\u0623\u0646 \u0643\u064a\u0641\u064a\u0629 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u062b\u063a\u0631\u0627\u062a \u064a\u0648\u0645 \u0627\u0644\u0635\u0641\u0631 \u0647\u0630\u0647 \u0641\u064a \u0627\u0644\u0647\u062c\u0645\u0627\u062a \u062d\u062a\u0649 \u064a\u062a\u0645 \u062a\u062d\u062f\u064a\u062b \u063a\u0627\u0644\u0628\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645\u064a\u0646 \u0628\u0627\u0644\u062a\u0635\u062d\u064a\u062d\u0627\u062a \u060c \u0644\u0643\u0646\u0647 \u0623\u0634\u0627\u0631 \u0625\u0644\u0649 \u0623\u0646\u0647 \u064a\u062f\u0631\u0643 \u0623\u0646 \"\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0633\u062a\u063a\u0644\u0627\u0644 CVE-2021 -37975 \u0648 CVE-2021-37976 \u0645\u0648\u062c\u0648\u062f\u0627\u0646 \u0641\u064a \u0627\u0644\u0628\u0631\u064a\u0629 \".\n\n\u0627\u0644\u0646\u0633\u062e \u0627\u0644\u0627\u062d\u062a\u064a\u0627\u0637\u064a\u0629 \u0627\u0644\u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u0639\u0644\u0649 GitHub\n\u0646\u064f\u0633\u0628 \u0627\u0644\u0641\u0636\u0644 \u0625\u0644\u0649 \u0628\u0627\u062d\u062b \u0645\u062c\u0647\u0648\u0644 \u0641\u064a \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646 CVE-2021-37975. \u0645\u0646 \u0646\u0627\u062d\u064a\u0629 \u0623\u062e\u0631\u0649 \u060c \u064a\u062a\u0636\u0645\u0646 \u0627\u0643\u062a\u0634\u0627\u0641 CVE-2021-37976 Cl\u00e9ment Lecigne \u0645\u0646 Google Threat Analysis Group \u060c \u0648\u0627\u0644\u0630\u064a \u064a\u064f\u0646\u0633\u0628 \u0625\u0644\u064a\u0647 \u0623\u064a\u0636\u064b\u0627 CVE-2021-37973 \u060c \u0648\u0647\u064a \u062b\u063a\u0631\u0629 \u0623\u062e\u0631\u0649 \u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0641\u064a \u0628\u0648\u0627\u0628\u0627\u062a \u0648\u0627\u062c\u0647\u0629 \u0628\u0631\u0645\u062c\u0629 \u062a\u0637\u0628\u064a\u0642\u0627\u062a Chrome \u0627\u0644\u062a\u064a \u062a\u0645 \u0627\u0644\u0625\u0628\u0644\u0627\u063a \u0639\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0627\u0644\u0645\u0627\u0636\u064a \u060c \u0623\u062b\u0627\u0631 \u0627\u062d\u062a\u0645\u0627\u0644 \u0623\u0646 \u064a\u0643\u0648\u0646 \u0627\u0644\u0639\u064a\u0628\u0627\u0646 \u0642\u062f \u062a\u0645 \u062a\u062c\u0645\u064a\u0639\u0647\u0645\u0627 \u0645\u0639\u064b\u0627 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0633\u0644\u0633\u0644\u0629 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062a\u0646\u0641\u064a\u0630 \u062a\u0639\u0644\u064a\u0645\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0639\u0634\u0648\u0627\u0626\u064a\u0629.\n\n\u0645\u0639 \u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0623\u062e\u064a\u0631 \u060c \u062a\u0639\u0627\u0645\u0644\u062a Google \u0645\u0639 \u0631\u0642\u0645 \u0642\u064a\u0627\u0633\u064a \u0628\u0644\u063a 14 \u064a\u0648\u0645\u064b\u0627 \u0641\u064a \u0645\u062a\u0635\u0641\u062d \u0627\u0644\u0648\u064a\u0628 \u0645\u0646\u0630 \u0628\u062f\u0627\u064a\u0629", "creation_timestamp": "2021-10-03T16:16:30.000000Z"}, {"uuid": "b5302821-133b-4536-90ee-1a7dca80e555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/information_security_channel/45353", "content": "Chrome 94 Update Patches Actively Exploited Zero-Day Vulnerability\nhttp://feedproxy.google.com/~r/securityweek/~3/feXXlaDijlI/chrome-94-update-patches-actively-exploited-zero-day-vulnerability\n\nGoogle has shipped an urgent Chrome update to address yet another zero-day vulnerability that has been actively exploited in attacks.\nTracked as CVE-2021-37973, the security bug is described as a use-after-free issue in the Portals API, a web page navigation technology that pre-renders content when transitioning to a new page, for a seamless experience.\nread more (https://www.securityweek.com/chrome-94-update-patches-actively-exploited-zero-day-vulnerability)", "creation_timestamp": "2021-09-27T13:27:09.000000Z"}, {"uuid": "197b9c0a-bcf8-4c23-bf13-640f20b91b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37977", "type": "seen", "source": "https://t.me/information_security_channel/45477", "content": "Google Patches Four Severe Vulnerabilities in Chrome\nhttp://feedproxy.google.com/~r/securityweek/~3/rgNGjlx-ARA/google-patches-four-severe-vulnerabilities-chrome\n\nGoogle this week announced the release of an updated Chrome version for Windows, Mac and Linux, to address a total of four high-severity vulnerabilities in the browser.\nTracked as CVE-2021-37977, the most severe of these security holes could be exploited to achieve arbitrary code execution on a target system.\nread more (https://www.securityweek.com/google-patches-four-severe-vulnerabilities-chrome)", "creation_timestamp": "2021-10-08T19:18:10.000000Z"}, {"uuid": "4a34cb23-6f3b-4e84-9d89-1b08da89cf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/xakep_ru/11355", "content": "\u0412 Chrome \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0435\u0449\u0435 \u043e\u0434\u043d\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b Google \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 Chrome \u0434\u043b\u044f Windows, Mac \u0438 Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 94.0.4606.61. \u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0443\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0430\u044f\u0441\u044f \u043f\u043e\u0434 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\nhttps://xakep.ru/2021/09/27/cve-2021-37973/", "creation_timestamp": "2021-09-27T17:44:10.000000Z"}, {"uuid": "6a84c2a7-81f2-4194-90ab-44c12596f446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-01T18:00:05.862930Z"}, {"uuid": "02b4c069-fbf2-42ce-b259-00fe1a03becd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/SecLabNews/10975", "content": "\u26a0\ufe0fGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome\n\n\u2757\ufe0f\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udee0\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0442\u0435\u0445\u043d\u043e\u0433\u0438\u0433\u0430\u043d\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0442\u0440\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b - CVE-2021-37974, CVE-2021-37975 \u0438 CVE-2021-37976. \u041f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nhttps://www.securitylab.ru/news/525174.php", "creation_timestamp": "2021-10-01T09:59:25.000000Z"}, {"uuid": "af213d36-8acb-4df6-abc8-aa67977c5b4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/SecLabNews/10975", "content": "\u26a0\ufe0fGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome\n\n\u2757\ufe0f\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udee0\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0442\u0435\u0445\u043d\u043e\u0433\u0438\u0433\u0430\u043d\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0442\u0440\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b - CVE-2021-37974, CVE-2021-37975 \u0438 CVE-2021-37976. \u041f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nhttps://www.securitylab.ru/news/525174.php", "creation_timestamp": "2021-10-01T09:59:25.000000Z"}, {"uuid": "5f8407e1-f36d-4875-9e5e-5abd076ddaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37974", "type": "exploited", "source": "https://t.me/SecLabNews/10975", "content": "\u26a0\ufe0fGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Chrome\n\n\u2757\ufe0f\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\ud83d\udee0\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0442\u0435\u0445\u043d\u043e\u0433\u0438\u0433\u0430\u043d\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0442\u0440\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b - CVE-2021-37974, CVE-2021-37975 \u0438 CVE-2021-37976. \u041f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435. \u041f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\nhttps://www.securitylab.ru/news/525174.php", "creation_timestamp": "2021-10-01T09:59:25.000000Z"}, {"uuid": "e010e479-4e76-4824-970a-b06de8659419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/4558", "content": "#Threat_Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975", "creation_timestamp": "2021-10-20T11:07:01.000000Z"}, {"uuid": "198b6552-85f6-481d-879b-78ad471565dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-03T05:00:04.325496Z"}, {"uuid": "96bb57c0-ddee-4c4e-8029-076a56bf41c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-02T00:00:24.488149Z"}, {"uuid": "7ad9898b-f5e8-47a1-927e-717634274336", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-08-04T00:00:49.191602Z"}, {"uuid": "1c26e782-e114-4543-9d39-2f1b102bb345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "Telegram/MdfEMfzqpQqOtZfA1sXzSO_D6sbdWtby_pIAMf5vB7iCJ2I", "content": "", "creation_timestamp": "2026-08-16T19:00:05.217468Z"}, {"uuid": "f4dd2e1e-0a97-45c9-968c-f755d1b08230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "Telegram/MdfEMfzqpQqOtZfA1sXzSO_D6sbdWtby_pIAMf5vB7iCJ2I", "content": "", "creation_timestamp": "2026-08-17T00:00:10.269897Z"}, {"uuid": "7c1e4377-03fe-4b76-8e5d-856a2c14ac5a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64479b64-933d-4067-be30-47e18496a737", "content": "", "creation_timestamp": "2026-06-19T12:47:46.530597Z"}, {"uuid": "108045bd-6b47-4965-8fe7-7ab9ebdafffc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/579bbb8b-d8ff-4fc8-bf3a-89c71bda6860", "content": "", "creation_timestamp": "2026-06-19T12:47:45.982846Z"}, {"uuid": "720646b7-6c2e-40de-9b94-ca4e18f68b78", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c774663-5470-4b99-b8cb-3f804786a4b7", "content": "", "creation_timestamp": "2026-06-19T12:47:46.744129Z"}, {"uuid": "fd7f0fc3-9ec1-4f3a-a0b0-001c102246c9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b29862c5-dafa-4cfa-b54f-59d03af36c0c", "content": "", "creation_timestamp": "2026-06-23T14:04:42.265786Z"}, {"uuid": "b5d28297-044d-477f-b803-91bd46646536", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7880a8d3-e3e9-4a16-b234-f763296e7561", "content": "", "creation_timestamp": "2026-06-23T14:04:42.901424Z"}, {"uuid": "573c9d9c-b0c4-4a57-a845-113d0d86e57c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd09cf9f-cf58-4136-93c7-707140d9d00b", "content": "", "creation_timestamp": "2026-06-23T14:04:42.410079Z"}, {"uuid": "a3643d05-7ad5-425b-9357-263ea5de8ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-22T14:00:15.652984Z"}, {"uuid": "ae825ad3-6ecd-4647-99e2-980dc081a21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-22T14:00:15.698488Z"}, {"uuid": "a6f5409f-7d8e-4269-9b5f-9703985d4d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37974", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-22T14:00:15.788177Z"}, {"uuid": "b0cdd5b8-0d73-49e9-a9fb-3bb1ba35bebe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37974", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-23T00:00:37.784597Z"}, {"uuid": "c6f36691-d01b-42ac-a759-9429bb4107f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-23T00:00:37.820699Z"}, {"uuid": "d2348c2b-04dc-4306-bd1d-cd1d758cf620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://t.me/bitbaanlab/635", "content": "\u2b55\ufe0f \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u062f\u0631 \u06af\u0648\u06af\u0644\u200c \u06a9\u0631\u0648\u0645\n       [\u0647\u0645\u06cc\u0646 \u0627\u0644\u0627\u0646 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f]\n\n\u26a0\ufe0f \u06af\u0648\u06af\u0644 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0628\u0631\u0627\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0647 \u06a9\u0647 \u06f3 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062e\u0637\u0631\u0646\u0627\u06a9 \u0631\u0627 \u062f\u0631 \u0622\u0646 \u0648\u0635\u0644\u0647 \u0646\u0645\u0648\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udda5 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u06a9\u0647 \u062f\u0648 \u0645\u0648\u0631\u062f \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u062e\u0637\u0631\u0646\u0627\u06a9 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u062f\u06cc\u06af\u0631 \u0645\u0631\u0648\u0631\u06af\u0631\u0647\u0627\u06cc Chromium \u0645\u0627\u0646\u0646\u062f Microsoft Edge \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u0646\u062f \u0648 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0622\u0646\u0647\u0627 \u0631\u0627 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f.\n\n\u26d4\ufe0f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\n\n\u2796 \u062f\u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37974 \u0648 CVE-2021-37975 \u0627\u06cc\u0646 \u0627\u0645\u06a9\u0627\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u06a9\u0647 \u06a9\u062f \u0645\u062e\u0631\u0628 \u062f\u0644\u062e\u0648\u0627\u0647\u0634 \u0631\u0627 \u0628\u0631 \u0633\u06cc\u0633\u062a\u0645 \u06cc\u0627 \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0627\u0631\u0628\u0631 \u0627\u062c\u0631\u0627 \u0646\u0645\u0627\u06cc\u062f \u0648 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u0628\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0622\u0646\u0647\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n\n\u2796 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2021-37976 \u0646\u06cc\u0632\u060c \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0627\u06cc \u0628\u0631\u0627\u06cc \u0647\u06a9\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u062d\u0631\u0645\u0627\u0646\u0647\u200c\u06cc \u0642\u0631\u0628\u0627\u0646\u06cc \u062f\u0633\u062a \u06cc\u0627\u0628\u062f.\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06af\u0648\u06af\u0644 \u06a9\u0631\u0648\u0645\n\nHelp > About Google Chrome >> Version 94.0.4606.71\n\n\ud83d\udd39 \u0628\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0627\u062c\n\nHelp and fedback > About Microsoft Edge >> Version 94.0.992.38\n\n\ud83c\udf10 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u06a9\u0645\u06cc\u0644\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627", "creation_timestamp": "2026-08-23T00:00:37.853827Z"}, {"uuid": "465e88d4-6d1a-4771-8a55-568ea199bae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "Telegram/8g9qE3V3IhqTv_OCceR2iT57So_ULY18Bpbe6a8g9xtXT5o", "content": "", "creation_timestamp": "2026-08-28T13:00:04.931727Z"}, {"uuid": "c77bf96f-6952-4c04-a677-d2c6e593de5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "published-proof-of-concept", "source": "Telegram/8g9qE3V3IhqTv_OCceR2iT57So_ULY18Bpbe6a8g9xtXT5o", "content": "", "creation_timestamp": "2026-08-29T00:00:11.624987Z"}, {"uuid": "929a79fb-fce9-4927-8fae-12dce3dda903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-29T12:01:53.069691Z"}, {"uuid": "e225472a-dc15-421d-af5e-5d14e5454658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-29T12:02:52.371099Z"}, {"uuid": "b7f93cb8-74d8-4295-aa26-ed4f26bfa9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/oleg_log/5008", "content": "I\u2019ll analyse CVE-2021-37975 (reported by an anonymous researcher), which is a logic bug in the implementation of the garbage collector (GC) in v8 (the JavaScript interpreter of Chrome). This bug allows reachable JavaScript objects to be collected by the garbage collector, which then leads to a use-after-free (UAF) vulnerability for arbitrary objects in v8.\n\n\u0425\u043e\u0447\u0435\u0442\u0441\u044f \u043d\u0430 2022 \u0432\u0437\u044f\u0442\u044c \u043e\u0431\u0435\u0449\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u044f \u0431\u0443\u0434\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0447\u0438\u0442\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b.\n\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-30T00:02:04.868928Z"}, {"uuid": "ac079372-4dab-4aa7-b733-a29aa4281380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/reverseame/1714", "content": "Chrome in-the-wild bug analysis: CVE-2021-37975 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975/", "creation_timestamp": "2026-07-30T00:02:42.846285Z"}, {"uuid": "41b15713-d1cd-4d0e-90e4-503cf427743d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-01T17:00:37.687359Z"}, {"uuid": "80d583f5-3936-45bb-98f9-7303fc38067a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.245100Z"}, {"uuid": "a895f340-3f8c-4373-99b8-7093b8298a52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:19.071116Z"}, {"uuid": "efd89cf0-95f5-438c-81e6-0895ceb62b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:19.433119Z"}, {"uuid": "49c83824-e9f7-4e2e-9785-13c2ed194006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:19.815131Z"}, {"uuid": "294869b5-f3d6-46f0-b561-7e17884da905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:02.614027Z"}, {"uuid": "aaaffafe-d8c3-487d-99be-be323b64b490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:49.040806Z"}, {"uuid": "1a0fd08f-dc9a-48fc-82f2-07a91c21e7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:48.459886Z"}, {"uuid": "996a1bdb-618b-424c-a499-6d57711e5711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "seen", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:48.754680Z"}, {"uuid": "b5d4e003-f566-4f6a-98a9-66e5f2616385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-02T01:04:22.500016Z"}, {"uuid": "979fe10f-5029-4a1e-9bf6-e0cdcb8ea524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T04:00:05.345759Z"}, {"uuid": "d2eeae8b-0a28-4bf8-b1b3-62c93d39ee48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "seen", "source": "https://t.me/hacking_Attack/48246", "content": "o execute arbitrary code inside a sandbox via a crafted HTML page.\n* CVE-2021-30551\u00a0\u2013- June 9, a type-confusion bug within V8 (also under active attack as a zero-day)\n* CVE-2021-30563\u00a0\u2013 July 15, another type-confusion bug in V8.\n* CVE-2021-30633\u00a0\u2013 Sept. 13, an out-of-bounds write in V8\n* CVE-2021-37975\u00a0\u2013 Sept. 30, a use-after-free bug in V8 (also attacked as a zero-day)\n* CVE-2021-38003\u00a0\u2013 Oct. 28, an inappropriate implementation in V8\n* CVE-2021-4102\u00a0\u2013 Dec. 13, a use-after-free bug in V8. See Also: Offensive Security Tool: Scapy Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: Hacking stories: MafiaBoy, the hacker who took down the Internet\nSource: threatpost.com Source Linkhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch-1024x1024.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/685f-article-211221-chrome-site-isolation-body-text-90x90.jpg HTML parser bug triggers Chromium XSS security flaw1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Polygon-hacker-90x90.jpg Hackers getting faster at latching onto unpatched vulnerabilities2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/mitmproxy-90x90.png HTTP request smuggling bug patched in mitmproxy3 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ee3dc49c79d14f20970cc8b20063f52e-90x90.jpg Flash loan attack on One Ring protocol nets crypto-thief $1.4 million6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-3-1-90x90.jpg DeadBolt Ransomware Resurfaces to Hit QNAP Again7 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/hackers-90x90.jpg Lapsus$ Data Kidnappers Claim Snatches From Microsoft, Okta1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Invisible-man-scaled-e1647906959971-90x90.jpg Browser-in-the-Browser Attack Makes Phishing Nearly Invisible1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/pdf-export-90x90.png Workaround offered for unpatched HTML-to-PDF rendering vulnerability1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/ezgif.com-gif-maker-2-scaled-90x90.jpg Caketap, a New Unix rootkit for stealing ATM banking data2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/AdobeStock_390895150_Editorial_Use_Only-1-1-min-scaled-1-90x90.jpeg Hundreds of GoDaddy-hosted sites backdoored in a single day2 weeks ago\nThe post Google Chrome Bug Actively Exploited as Zero-Day first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:35.978500Z"}, {"uuid": "c98f743e-def7-4bea-aa64-4a11a2ab721d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T12:00:03.813669Z"}, {"uuid": "70716ed5-9ed5-4f01-8941-bdc0c8126acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T12:00:04.122698Z"}, {"uuid": "1a4eb04c-5dfe-4192-abce-06b327f75ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T12:00:04.380496Z"}, {"uuid": "35416a3f-d5cd-44a2-93a1-ebc6f39f3525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:46.338907Z"}, {"uuid": "99f71e41-b69a-42eb-9b0b-f0c568f5befb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37976", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:46.672526Z"}, {"uuid": "7d36013a-692e-4bf6-b432-f6b9d067dc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37973", "type": "exploited", "source": "https://t.me/hacking_Attack/25743", "content": "Black Hat Ethical Hacking\nGoogle pushes emergency Chrome update to fix two zero-days\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Google pushes emergency Chrome update to fix two zero-daysPost Views: 73 \nReading Time: 1 Minute\nGoogle has released Chrome 94.0.4606.71 for Windows, Mac, and Linux, to fix two zero-day vulnerabilities that have been exploited by attackers.\n\u201cGoogle is aware the exploits for CVE-2021-37975 and CVE-2021-37976 exist in the wild,\u201d Google disclosed in the list of security fixes\u00a0fixed in today\u2019s Google Chrome release.\n\nGoogle has started rolling out Chrome 94.0.4606.71 to users worldwide\u00a0in the Stable Desktop channel and should be available to all users within the coming days.\n\nTo install the update immediately, Google Chrome users can go to Chrome menu > Help > About Google Chrome, and the browser will begin performing the update.\n\nIn our tests, the new version of the browser was installed immediately using the above steps.\nhttps://www.bleepstatic.com/images/news/web-browsers/chrome/chrome-94.jpg \nZero-day attacks\u2019 details not disclosedWhile this Chrome release includes fixes for four security vulnerabilities, the two zero-days are concerning as they are known to have been exploited in the wild.\n\nThe first zero-day, tracked as CVE-2021-37976, is described as an \u201cInformation leak in core\u201d and was assigned a Medium severity level. This vulnerability was discovered by Cl\u00e9ment Lecigne from Google TAG, with technical assistance from Sergei Glazunov and Mark Brand from Google Project Zero, on September 21st, 2021.\n\nThe second zero-day, tracked as CVE-2021-37975, is a High severity user after free\u00a0bug in the Chrome V8 JavaScript engine. The researcher disclosed this vulnerability on September 24th and wished to remain anonymous.\n\nUse after free bugs are commonly used to perform remote code execution or escape the browser\u2019s security sandbox.\n\nAt this time, there are no other details regarding how these zero-day vulnerabilities were used in attacks but may be released in future reports by Google TAG or Project Zero.\n2 more in-the-wild 0days fixed by Chrome:\n* CVE-2021-37975 use-after-free in V8 by anonymous\n* CVE-2021-37976 info leak in core by @_clem1 #itw0days\n\nThe release cycle that Chrome is making happen in order to get these patches out is pretty impressivehttps://t.co/j1xPY4zjlP\n\n\u2014 Maddie Stone (@maddiestone) September 30, 2021\nSee Also: Hackers exploiting critical VMware vCenter CVE-2021-22005 bug Chrome users should perform a manual upgrade or restart their browser to install the latest version and prevent exploitation attempts. Thirteenth zero-day fixed this yearWith these two fixes, Google has patched 13\u00a0zero-day vulnerabilities in the Chrome web browser since the start of 2021.\n\nThe other Chrome zero-day bugs Google fixed this year are:\n\n* CVE-2021-21148\u00a0\u2013 February 4th, 2021\n* CVE-2021-21166\u00a0\u2013 March 2nd, 2021\n* CVE-2021-21193\u00a0\u2013 March 12th, 2021\n* CVE-2021-21220\u00a0\u2013 April 13th, 2021\n* CVE-2021-21224\u00a0\u2013 April 20th, 2021\n* CVE-2021-30551\u00a0\u2013 June 9th, 2021\n* CVE-2021-30554\u00a0\u2013 June 17th, 2021\n* CVE-2021-30563\u00a0\u2013 July 15th, 2021\n* CVE-2021-30632 and CVE-2021-30633\u00a0\u2013 September 13th\n* CVE-2021-37973\u00a0\u2013 September 24th, 2021\n\nAs Google is\u00a0rushing out Chrome updates to fix zero-days as they are reported, it is always critical to install new browser updates as soon as they become available.\nSee Also: Offensive Security Tool: Discover\n[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:46.911875Z"}, {"uuid": "c3fba8dd-dd5c-474c-b098-20c1a5fbd4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-10T17:00:05.218469Z"}, {"uuid": "359b3ad0-bc58-4e27-8598-54e02e86747b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37975", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4662", "content": "Offensive security\nShellcode Injection Techniques\nhttps://github.com/plackyhacker/Shellcode-Injection-Techniques\n// A collection of C# shellcode injection techniques. All techniques use an AES encrypted meterpreter payload\n\nThreat Research\n1. Google Earth Hacking - EaaS\n(Espionage as a Service)\nhttps://johnjhacking.com/blog/gee-exploitation\n2. Chrome in-the-wild bug analysis: CVE-2021-37975\nhttps://securitylab.github.com/research/in_the_wild_chrome_cve_2021_37975\n\nAnalytics\nHow a simple Linux kernel memory corruption bug can lead to complete system compromise: An analysis of current and potential kernel security mitigations\nhttps://googleprojectzero.blogspot.com/2021/10/how-simple-linux-kernel-memory.html?m=1\n]-> PoC Exploit:\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2125#c5\n\nBlue Team Techniques\n1. Real Intelligence Threat Analytics\nis a framework for detecting command and control communication through network traffic analysis\nhttps://github.com/activecm/rita\n2. XNTSV program for detailed viewing of system structures for Windows\nhttps://github.com/horsicq/xntsv\n\nCloud Security\nA Scientific Notation Bug in MySQL left AWS WAF Clients Vulnerable to SQL Injection\nhttps://www.gosecure.net/blog/2021/10/19/a-scientific-notation-bug-in-mysql-left-aws-waf-clients-vulnerable-to-sql-injection\n\nMalware analysis\n1. IcedID to XingLocker Ransomware\nhttps://thedfirreport.com/2021/10/18/icedid-to-xinglocker-ransomware-in-24-hours\n2. TA505 Ramps Up Activity, Delivers New FlawedGrace Variant\nhttps://www.proofpoint.com/us/blog/threat-insight/whatta-ta-ta505-ramps-activity-delivers-new-flawedgrace-variant", "creation_timestamp": "2026-09-11T00:00:33.549605Z"}]}