from Hacker News

New Chrome Zero-Day

by bsaunder on 11/7/19, 9:53 PM with 11 comments

• by maxmcd on 11/7/19, 10:17 PM

  Previous discussion: https://news.ycombinator.com/item?id=21425804

• by NikolaeVarius on 11/7/19, 10:23 PM

  Was already patched on Oct 31 https://chromereleases.googleblog.com/2019/10/stable-channel...

• by maerF0x0 on 11/7/19, 9:59 PM

  I would suggest we put the date in these kind of 0 day titles. Nov 4 in this case...

• by andrewstuart on 11/7/19, 10:29 PM

  Why would cybercriminals not just report the bug and pick up the cash from Google? Is it genuinely that much more lucrative to exploit it?

• by thephyber on 11/7/19, 10:44 PM

  The CVE is still embargoed[1] as of the time of this comment. =/

  [1] https://nvd.nist.gov/vuln/detail/CVE-2019-13720

• by 0xdeadb00f on 11/7/19, 10:19 PM

  I'm assuming this doesn't affect Chromium, or Chromium(-based) browsers on Android then? Seeing as it isn't mentioned.