{"id":10324,"date":"2025-11-18T19:31:28","date_gmt":"2025-11-18T12:31:28","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=10324"},"modified":"2026-02-03T19:33:07","modified_gmt":"2026-02-03T12:33:07","slug":"google-phat-hanh-ban-va-khan-cap-cho-hai-lo-hong-nguy-hiem-trong-chrome-v8","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/2025\/11\/18\/google-phat-hanh-ban-va-khan-cap-cho-hai-lo-hong-nguy-hiem-trong-chrome-v8\/","title":{"rendered":"Google ph\u00e1t h\u00e0nh b\u1ea3n v\u00e1 kh\u1ea9n c\u1ea5p cho hai l\u1ed7 h\u1ed5ng nguy hi\u1ec3m trong Chrome V8"},"content":{"rendered":"<p data-start=\"131\" data-end=\"679\">Google v\u1eeba ph\u00e1t h\u00e0nh m\u1ed9t b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt kh\u1ea9n c\u1ea5p cho tr\u00ecnh duy\u1ec7t Chrome nh\u1eb1m kh\u1eafc ph\u1ee5c hai l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng thu\u1ed9c nh\u00f3m Type Confusion trong V8 JavaScript engine. \u0110\u00e1ng ch\u00fa \u00fd, m\u1ed9t trong hai l\u1ed7 h\u1ed5ng l\u00e0 zero-day v\u00e0 \u0111\u00e3 b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c trong th\u1ef1c t\u1ebf, cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng th\u1ef1c thi m\u00e3 t\u00f9y \u00fd ch\u1ec9 th\u00f4ng qua vi\u1ec7c ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp v\u00e0o c\u00e1c trang web \u0111\u1ed9c h\u1ea1i. \u0110\u00e2y \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 l\u00e0 m\u1ed1i \u0111e d\u1ecda nghi\u00eam tr\u1ecdng, \u0111\u1eb7c bi\u1ec7t \u0111\u1ed1i v\u1edbi m\u00f4i tr\u01b0\u1eddng doanh nghi\u1ec7p v\u00e0 c\u00e1c h\u1ec7 th\u1ed1ng quan tr\u1ecdng, khi h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng drive-by ng\u00e0y c\u00e0ng tinh vi v\u00e0 kh\u00f3 ph\u00e1t hi\u1ec7n.<\/p>\n<p data-start=\"131\" data-end=\"679\"><img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone  wp-image-10325\" src=\"https:\/\/infosec.new88088.net\/wp-content\/uploads\/sites\/20\/2026\/02\/Google-Patches-300x167.png\" alt=\"\" width=\"724\" height=\"403\" srcset=\"https:\/\/infosec.new88088.net\/wp-content\/uploads\/sites\/20\/2026\/02\/Google-Patches-300x167.png 300w, https:\/\/infosec.new88088.net\/wp-content\/uploads\/sites\/20\/2026\/02\/Google-Patches.png 700w\" sizes=\"(max-width: 724px) 100vw, 724px\" \/><\/p>\n<p data-start=\"681\" data-end=\"1143\">Theo th\u00f4ng tin t\u1eeb Google, l\u1ed7 h\u1ed5ng nguy hi\u1ec3m nh\u1ea5t mang m\u00e3 CVE-2025-13223, \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n b\u1edfi nh\u00f3m Threat Analysis Group (TAG) trong qu\u00e1 tr\u00ecnh theo d\u00f5i c\u00e1c chi\u1ebfn d\u1ecbch t\u1ea5n c\u00f4ng c\u00f3 ch\u1ee7 \u0111\u00edch. L\u1ed7i n\u00e0y x\u1ea3y ra khi V8 x\u1eed l\u00fd sai ki\u1ec3u d\u1eef li\u1ec7u c\u1ee7a m\u1ed9t \u0111\u1ed1i t\u01b0\u1ee3ng, d\u1eabn \u0111\u1ebfn vi\u1ec7c hi\u1ec3u sai v\u00f9ng nh\u1edb v\u00e0 g\u00e2y h\u1ecfng heap. Trong m\u00f4i tr\u01b0\u1eddng tr\u00ecnh duy\u1ec7t, tr\u1ea1ng th\u00e1i n\u00e0y c\u00f3 th\u1ec3 b\u1ecb l\u1ee3i d\u1ee5ng \u0111\u1ec3 ki\u1ec3m so\u00e1t lu\u1ed3ng th\u1ef1c thi, t\u1eeb \u0111\u00f3 m\u1edf \u0111\u01b0\u1eddng cho vi\u1ec7c th\u1ef1c thi m\u00e3 t\u00f9y \u00fd tr\u00ean h\u1ec7 th\u1ed1ng c\u1ee7a n\u1ea1n nh\u00e2n.<\/p>\n<p data-start=\"1145\" data-end=\"1495\">\u0110i\u1ec3m \u0111\u1eb7c bi\u1ec7t \u0111\u00e1ng lo ng\u1ea1i l\u00e0 CVE-2025-13223 \u0111\u00e3 b\u1ecb khai th\u00e1c ngo\u00e0i th\u1ef1c t\u1ebf. Ng\u01b0\u1eddi d\u00f9ng ch\u1ec9 c\u1ea7n truy c\u1eadp v\u00e0o m\u1ed9t website \u0111\u1ed9c h\u1ea1i \u0111\u01b0\u1ee3c chu\u1ea9n b\u1ecb s\u1eb5n l\u00e0 chu\u1ed7i khai th\u00e1c c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t, m\u00e0 kh\u00f4ng c\u1ea7n th\u1ef1c hi\u1ec7n th\u00eam b\u1ea5t k\u1ef3 thao t\u00e1c n\u00e0o. Ch\u00ednh \u0111\u1eb7c \u0111i\u1ec3m n\u00e0y khi\u1ebfn l\u1ed7 h\u1ed5ng tr\u1edf n\u00ean \u0111\u1eb7c bi\u1ec7t nguy hi\u1ec3m, v\u00ec n\u1ea1n nh\u00e2n r\u1ea5t kh\u00f3 nh\u1eadn bi\u1ebft m\u00ecnh \u0111ang b\u1ecb t\u1ea5n c\u00f4ng.<\/p>\n<p data-start=\"1497\" data-end=\"1845\">L\u1ed7 h\u1ed5ng th\u1ee9 hai, CVE-2025-13224, c\u0169ng thu\u1ed9c nh\u00f3m Type Confusion trong V8 v\u00e0 \u0111\u01b0\u1ee3c \u0111\u00e1nh gi\u00e1 \u1edf m\u1ee9c nghi\u00eam tr\u1ecdng. Hi\u1ec7n t\u1ea1i ch\u01b0a c\u00f3 b\u1eb1ng ch\u1ee9ng cho th\u1ea5y l\u1ed7i n\u00e0y \u0111\u00e3 b\u1ecb khai th\u00e1c, tuy nhi\u00ean v\u1edbi c\u00e1c \u0111\u1eb7c \u0111i\u1ec3m k\u1ef9 thu\u1eadt t\u01b0\u01a1ng t\u1ef1 nh\u1eefng l\u1ed7 h\u1ed5ng t\u1eebng d\u1eabn \u0111\u1ebfn th\u1ef1c thi m\u00e3 trong qu\u00e1 kh\u1ee9, Google v\u1eabn khuy\u1ebfn c\u00e1o ng\u01b0\u1eddi d\u00f9ng c\u1ea7n c\u1eadp nh\u1eadt ngay \u0111\u1ec3 lo\u1ea1i b\u1ecf r\u1ee7i ro ti\u1ec1m \u1ea9n.<\/p>\n<p data-start=\"1847\" data-end=\"2219\">\u0110\u1ec3 gi\u1ea3m nguy c\u01a1 b\u1ecb khai th\u00e1c, Google t\u1ea1m th\u1eddi ch\u01b0a c\u00f4ng b\u1ed1 chi ti\u1ebft k\u1ef9 thu\u1eadt c\u1ee7a hai l\u1ed7 h\u1ed5ng. \u0110\u00e2y l\u00e0 bi\u1ec7n ph\u00e1p quen thu\u1ed9c khi x\u1eed l\u00fd zero-day, nh\u1eb1m ng\u0103n ch\u1eb7n vi\u1ec7c k\u1ebb t\u1ea5n c\u00f4ng ph\u00e2n t\u00edch b\u1ea3n v\u00e1 \u0111\u1ec3 ph\u00e1t tri\u1ec3n th\u00eam c\u00f4ng c\u1ee5 khai th\u00e1c m\u1edbi. B\u1ea3n c\u1eadp nh\u1eadt hi\u1ec7n \u0111\u01b0\u1ee3c tri\u1ec3n khai theo t\u1eebng \u0111\u1ee3t, nh\u01b0ng Google khuy\u1ebfn ngh\u1ecb ng\u01b0\u1eddi d\u00f9ng ch\u1ee7 \u0111\u1ed9ng c\u1eadp nh\u1eadt th\u1ee7 c\u00f4ng thay v\u00ec ch\u1edd c\u01a1 ch\u1ebf t\u1ef1 \u0111\u1ed9ng.<\/p>\n<p data-start=\"2221\" data-end=\"2512\">Vi\u1ec7c li\u00ean t\u1ee5c xu\u1ea5t hi\u1ec7n c\u00e1c l\u1ed7 h\u1ed5ng Type Confusion trong V8 cho th\u1ea5y tr\u00ecnh duy\u1ec7t web v\u1eabn l\u00e0 m\u1ee5c ti\u00eau h\u00e0ng \u0111\u1ea7u c\u1ee7a c\u00e1c nh\u00f3m t\u1ea5n c\u00f4ng tinh vi. Trong b\u1ed1i c\u1ea3nh \u0111\u00f3, c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m k\u1ecbp th\u1eddi v\u1eabn l\u00e0 bi\u1ec7n ph\u00e1p ph\u00f2ng v\u1ec7 \u0111\u01a1n gi\u1ea3n nh\u01b0ng hi\u1ec7u qu\u1ea3 nh\u1ea5t \u0111\u1ec3 b\u1ea3o v\u1ec7 h\u1ec7 th\u1ed1ng tr\u01b0\u1edbc c\u00e1c m\u1ed1i \u0111e d\u1ecda zero-day.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Google v\u1eeba ph\u00e1t h\u00e0nh m\u1ed9t b\u1ea3n c\u1eadp nh\u1eadt b\u1ea3o m\u1eadt kh\u1ea9n c\u1ea5p cho tr\u00ecnh duy\u1ec7t Chrome nh\u1eb1m kh\u1eafc ph\u1ee5c hai l\u1ed7 h\u1ed5ng nghi\u00eam tr\u1ecdng thu\u1ed9c nh\u00f3m Type Confusion trong V8 JavaScript engine. \u0110\u00e1ng ch\u00fa \u00fd, m\u1ed9t trong hai l\u1ed7 h\u1ed5ng l\u00e0 zero-day v\u00e0 \u0111\u00e3 b\u1ecb khai th\u00e1c t\u00edch c\u1ef1c trong th\u1ef1c t\u1ebf, cho ph\u00e9p k\u1ebb [&hellip;]<\/p>\n","protected":false},"author":46,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[],"class_list":["post-10324","post","type-post","status-publish","format-standard","hentry","category-tin-tuc-cua-vien"],"_links":{"self":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10324","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/users\/46"}],"replies":[{"embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/comments?post=10324"}],"version-history":[{"count":0,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/posts\/10324\/revisions"}],"wp:attachment":[{"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/media?parent=10324"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/categories?post=10324"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infosec.new88088.net\/wp-json\/wp\/v2\/tags?post=10324"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}