ChromeOS had severe security vulnerability

Stefan Mileschin · 25th August 2022, 05:56

Pointed out by Microsoft

Microsoft has found a severe ChromeOS security vulnerability and even told Google about it in April.

The bug was promptly fixed and, about a month later, merged in ChromeOS code then released on June 15, 2022 and detailed by Redmond in a report released on Friday.

What is funny about the vulnerablity is that it was really bad, existed due to bad Google coding, and the fact it is usually Google's Project Zero group pointing to bugs in Microsoft software.

Google was also particularly nasty about the discovery of its flaws. It normally disclosed bugs after 90 days – even if a patch had not been released. While this did mean that companies responded to security flaws quicker sometimes the patches were worse than the bugs.

https://fudzilla.com/news/55366-chro...-vulnerability

25th August 2022, 05:56	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,652	ChromeOS had severe security vulnerability Pointed out by Microsoft Microsoft has found a severe ChromeOS security vulnerability and even told Google about it in April. The bug was promptly fixed and, about a month later, merged in ChromeOS code then released on June 15, 2022 and detailed by Redmond in a report released on Friday. What is funny about the vulnerablity is that it was really bad, existed due to bad Google coding, and the fact it is usually Google's Project Zero group pointing to bugs in Microsoft software. Google was also particularly nasty about the discovery of its flaws. It normally disclosed bugs after 90 days – even if a patch had not been released. While this did mean that companies responded to security flaws quicker sometimes the patches were worse than the bugs. https://fudzilla.com/news/55366-chro...-vulnerability

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Google's ChromeOS Flex can turn your old laptop into a Chromebook	Stefan Mileschin	WebNews	0	16th February 2022 09:47
Severe security problem detected in all IoT devices	Stefan Mileschin	WebNews	0	10th June 2020 07:14
Google recalls some Titan security keys after finding Bluetooth vulnerability	Stefan Mileschin	WebNews	0	16th May 2019 09:10
Microsoft already has a fix for that severe WiFi security exploit	Stefan Mileschin	WebNews	0	17th October 2017 05:35
ASUS Chromebit CS10 ChromeOS HDMI Dongle	Stefan Mileschin	WebNews	0	19th February 2016 08:21
AVG Security Toolbar Vulnerability Puts IE Users At Risk	Stefan Mileschin	WebNews	0	11th July 2014 07:58
LG's 21.5-inch Chromebase all-in-one puts ChromeOS on the desktop	Stefan Mileschin	WebNews	0	18th December 2013 09:39
Oracle patches major Java 7 security vulnerability	Stefan Mileschin	WebNews	0	15th January 2013 07:29
Skype disables password reset page to deal with email-based security 'vulnerability'	Stefan Mileschin	WebNews	0	15th November 2012 06:44
ChromeOS Benchmarked Against Ubuntu and Moblin	jmke	WebNews	1	24th November 2009 10:05