Google Chrome v90.0.4430.212 正式版發布

2021-05-11 Comments 0 Comment

谷歌瀏覽器Google Chrome正式版迎來v90第四個維護版本發布，詳細版本號為v90.0.4430.212，上一個正式版v90.0.4430.93發佈於4月27日，時隔14天Google又發布了新版Chrome瀏覽器，本次升級主要是更新了安全修復和穩定性改進及用戶體驗。

新版變化

Chrome v90.0.4430.212 正式版（2021-05-11）

谷歌瀏覽器v90正式版主要更新，引入了許多以用戶為中心的功能改進，輔以安全性方面的進一步提升。默認向目標網站鏈接均啟用SSL安全傳輸協議(HTTPS)，全新AV1開源視頻編碼器的技術支持，高清視頻佔用大幅減小。新增窗口重命名功能，可重命名已打開的多個窗口，可記住窗口的配置，遇到崩潰重啟會自動恢復狀態。還有WebXR深度API、啟用了URL協議設置程序、效果疊加層、以及安全性方面的諸多改進，比如為了防範緩解NAT Slipstream 2.0攻擊，而屏蔽封鎖了通過554端口的HTTP/HTTPS/FTP服務器訪問。

谷歌瀏覽器v89正式版主要更新，修復了一個零日漏洞，建議用戶盡快更新。優化了對WebHID、WebNFC和Web Serial等適用於HID設備API的支持，此外NFC和串行設備也被認為可以投入生產使用。還初步為WebRTC添加了對AV1編碼的支持。此外桌面端還帶來了Web Share和Web Share Target支持以及其他增強功能。

谷歌瀏覽器v88正式版主要更新，改進深色主題支持，優化深色模式，覆蓋設置、書籤、歷史、新標籤頁等更多內部頁面的滾動條。停止對FTP的支持，無法使用Chrome作為FTP客戶端，不再支持ftp://開頭的地址。停止對Mac OS Yosemite的支持，結束對舊版瀏覽器附加組件的支持，減少請求許可干擾，優化適用於Chrome OS的淺色和深色模式。

安全修復和獎勵

googlechromereleases.blogspot.com

Chrome v90.0.4430.212，此更新包括19個安全修復程序。

[$3000][1180126] High CVE-2021-30506: Incorrect security UI in Web App Installs. Reported by @retsew0x01 on 2021-02-19

[$NA][1178202] High CVE-2021-30507: Inappropriate implementation in Offline. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2021-02-14

[$TBD][1195340] High CVE-2021-30508: Heap buffer overflow in Media Feeds. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-04-02

[$TBD][1196309] High CVE-2021-30509: Out of bounds write in Tab Strip. Reported by David Erceg on 2021-04-06

[$TBD][1197436] High CVE-2021-30510: Race in Aura. Reported by Weipeng Jiang (@Krace) from Codesafe Team of Legendsec at Qi’anxin Group on 2021-04-09

[$TBD][1197875] High CVE-2021-30511: Out of bounds read in Tab Groups. Reported by David Erceg on 2021-04-10

[$TBD][1200019] High CVE-2021-30512: Use after free in Notifications. Reported by ZhanJia Song on 2021-04-17

[$NA][1200490] High CVE-2021-30513: Type Confusion in V8. Reported by Man Yue Mo of GitHub Security Lab on 2021-04-19

[$TBD][1200766] High CVE-2021-30514: Use after free in Autofill. Reported by koocola (@alo_cook) and Nan Wang (@eternalsakura13) of 360 Alpha Lab on 2021-04-20

[$TBD][1201073] High CVE-2021-30515: Use after free in File API. Reported by Rong Jian and Guang Gong of 360 Alpha Lab on 2021-04-21

[$TBD][1201446] High CVE-2021-30516: Heap buffer overflow in History. Reported by ZhanJia Song on 2021-04-22

[$TBD][1203122] High CVE-2021-30517: Type Confusion in V8. Reported by laural on 2021-04-27

[$NA][1203590] High CVE-2021-30518: Heap buffer overflow in Reader Mode. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2021-04-28

[$15000][1194058] Medium CVE-2021-30519: Use after free in Payments. Reported by asnine on 2021-03-30

[$10000][1193362] Medium CVE-2021-30520: Use after free in Tab Strip. Reported by Khalil Zhani on 2021-04-03

[1207457] Various fixes from internal audits, fuzzing and other initiatives

下載地址

離線安裝包“無更新組件”版提取原生綠色版方法：

鼠標右鍵解壓離線安裝包，此時會解壓出來一個chrome.7z

再對chrome.7z解壓就是原生綠色版啦！

離線安裝包“無更新組件”版不含在線更新升級功能，所以不會添加更新計劃任務，也沒有後台更新進程，更乾淨。

Google Chrome v90.0.4430.212 官方正式版離線安裝包（無更新組件）64位

https://dl.google.com/release2/chrome/L0cE5fRDwxxyfS9AhP6GNw_90.0.4430.212/90.0.4430.212_chrome_installer.exe

https://www.google.com/dl/release2/chrome/L0cE5fRDwxxyfS9AhP6GNw_90.0.4430.212/90.0.4430.212_chrome_installer.exe

https://redirector.gvt1.com/edgedl/release2/chrome/L0cE5fRDwxxyfS9AhP6GNw_90.0.4430.212/90.0.4430.212_chrome_installer.exe