Google выпустила внеплановое обновление для браузера Chrome, закрыв три уязвимости, одна из которых уже используется злоумышленниками. Наиболее опасной из них признана уязвимость CVE-2025-5419 (оценка CVSS: 8.8), связанная с некорректной обработкой памяти в движке V8, отвечающем за выполнение JavaScript и WebAssembly.

◦ Audit existing unconstrained delegations
◦ Audit existing constrained delegations with or without protocol transition
◦ Audit existing resource-based constrained delegations

◦ Add new unconstrained delegations
◦ Add new constrained delegations with or without protocol transition
◦ Add new resource-based constrained delegations

◦ Find unconstrained delegations
◦ Find constrained delegations with or without protocol transition
◦ Find resource-based constrained delegations

◦ Clear existing unconstrained delegations
◦ Clear existing constrained delegations with or without protocol transition
◦ Clear existing resource-based constrained delegations

◦ Remove existing unconstrained delegations
◦ Remove existing constrained delegations with or without protocol transition
◦ Remove existing resource-based constrained delegations

◦ Monitor modifications of all types of delegations in real-time
• Protocol transition mode:
◦ Add protocol transition on a constrained delegation
◦ Remove protocol transition on a constrained delegation