聲明：該文章由作者（曲珊珊）發(fā)表，轉(zhuǎn)載此文章須經(jīng)作者同意并請(qǐng)附上出處(0XUCN)及本頁(yè)鏈接。。

谷歌瀏覽器Google Chrome正式版迎來(lái)v89第二個(gè)維護(hù)版本發(fā)布，詳細(xì)版本號(hào)為v89.0.4389.82，上一個(gè)正式版v89.0.4389.72發(fā)布于3月3日，時(shí)隔3天Google又發(fā)布了新版Chrome瀏覽器，本次升級(jí)主要是更新了安全修復(fù)和穩(wěn)定性改進(jìn)及用戶體驗(yàn)。

Chrome v89.0.4389.82 正式版（2021-03-06）

blog.chromium.org

blog.google/products/chrome

googlechromereleases.blogspot.com

谷歌瀏覽器v89正式版主要更新，修復(fù)了一個(gè)零日漏洞，建議用戶盡快更新。優(yōu)化了對(duì)WebHID、WebNFC和Web Serial等適用于HID設(shè)備API的支持，此外NFC和串行設(shè)備也被認(rèn)為可以投入生產(chǎn)使用。還初步為WebRTC添加了對(duì)AV1編碼的支持。此外桌面端還帶來(lái)了Web Share和Web Share Target支持以及其他增強(qiáng)功能。

谷歌瀏覽器v88正式版主要更新，改進(jìn)深色主題支持，優(yōu)化深色模式，覆蓋設(shè)置、書(shū)簽、歷史、新標(biāo)簽頁(yè)等更多內(nèi)部頁(yè)面的滾動(dòng)條。停止對(duì)FTP的支持，無(wú)法使用Chrome作為FTP客戶端，不再支持ftp://開(kāi)頭的地址。停止對(duì)Mac OS Yosemite的支持，結(jié)束對(duì)舊版瀏覽器附加組件的支持，減少請(qǐng)求許可干擾，優(yōu)化適用于Chrome OS的淺色和深色模式。

谷歌瀏覽器v87正式版主要更新，由于進(jìn)行了許多底層改進(jìn)，更快地啟動(dòng)、更快地加載，更多方式提升續(xù)航，代表了多年來(lái)Chrome性能的最大提高?；顒?dòng)標(biāo)簽頁(yè)優(yōu)先處理將CPU使用率降低5倍，并將電池壽命延長(zhǎng)1.25小時(shí)。Chrome啟動(dòng)速度快25%，頁(yè)面加載速度提高了7％，并且所有這些操作都比以前使用更少的電量和內(nèi)存。

安全修復(fù)和獎(jiǎng)勵(lì)

Chrome v89.0.4389.72，此更新包括47個(gè)安全修復(fù)程序。

[$10000][1171049] High CVE-2021-21159: Heap buffer overflow in TabStrip. Reported by Khalil Zhani on 2021-01-27

[$7500][1170531] High CVE-2021-21160: Heap buffer overflow in WebAudio. Reported by Aleksandar Nikolic of Cisco Talos on 2021-01-25

[$7500][1173702] High CVE-2021-21161: Heap buffer overflow in TabStrip. Reported by Khalil Zhani on 2021-02-02

[$5000][1172054] High CVE-2021-21162: Use after free in WebRTC. Reported by Anonymous on 2021-01-29

[$TBD][1111239] High CVE-2021-21163: Insufficient data validation in Reader Mode. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2020-07-30

[$TBD][1164846] High CVE-2021-21164: Insufficient data validation in Chrome for iOS. Reported by Muneaki Nishimura (nishimunea) on 2021-01-11

[$TBD][1174582] High CVE-2021-21165: Object lifecycle issue in audio. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2021-02-04

[$TBD][1177465] High CVE-2021-21166: Object lifecycle issue in audio. Reported by Alison Huffman, Microsoft Browser Vulnerability Research on 2021-02-11

[$10000][1161144] Medium CVE-2021-21167: Use after free in bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2020-12-22

[$5000][1152226] Medium CVE-2021-21168: Insufficient policy enforcement in appcache. Reported by Luan Herrera (@lbherrera_) on 2020-11-24

[$5000][1166138] Medium CVE-2021-21169: Out of bounds memory access in V8. Reported by Bohan Liu (@P4nda20371774) of Tencent Security Xuanwu Lab on 2021-01-13

[$3000][1111646] Medium CVE-2021-21170: Incorrect security UI in Loader. Reported by David Erceg on 2020-07-31

[$3000][1152894] Medium CVE-2021-21171: Incorrect security UI in TabStrip and Navigation. Reported by Irvan Kurniawan (sourc7) on 2020-11-25

[$1000][1150810] Medium CVE-2021-21172: Insufficient policy enforcement in File System API. Reported by Maciej Pulikowski on 2020-11-19

[$500][1154250] Medium CVE-2021-21173: Side-channel information leakage in Network Internals. Reported by Tom Van Goethem from imec-DistriNet, KU Leuven on 2020-12-01

[$500][1158010] Medium CVE-2021-21174: Inappropriate implementation in Referrer. Reported by Ashish Gautam Kamble on 2020-12-11

[$TBD][1146651] Medium CVE-2021-21175: Inappropriate implementation in Site isolation. Reported by Jun Kokatsu, Microsoft Browser Vulnerability Research on 2020-11-07

[$TBD][1170584] Medium CVE-2021-21176: Inappropriate implementation in full screen mode. Reported by Luan Herrera (@lbherrera_) on 2021-01-26

[$TBD][1173879] Medium CVE-2021-21177: Insufficient policy enforcement in Autofill. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research on 2021-02-03

[$TBD][1174186] Medium CVE-2021-21178: Inappropriate implementation in Compositing. Reported by Japong on 2021-02-03

[$TBD][1174943] Medium CVE-2021-21179: Use after free in Network Internals. Reported by Anonymous on 2021-02-05

[$TBD][1175507] Medium CVE-2021-21180: Use after free in tab search. Reported by Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research on 2021-02-07

[$TBD][1177875] Medium CVE-2020-27844: Heap buffer overflow in OpenJPEG. Reported by Sean Campbell at Tableau on 2021-02-12

[$TBD][1182767] Medium CVE-2021-21181: Side-channel information leakage in autofill. Reported by Xu Lin (University of Illinois at Chicago), Panagiotis Ilia (University of Illinois at Chicago), Jason Polakis (University of Illinois at Chicago) on 2021-02-26

[$1000][1049265] Low CVE-2021-21182: Insufficient policy enforcement in navigations. Reported by Luan Herrera (@lbherrera_) on 2020-02-05

[$1000][1105875] Low CVE-2021-21183: Inappropriate implementation in performance APIs. Reported by Takashi Yoneuchi (@y0n3uchy) on 2020-07-15

[$1000][1131929] Low CVE-2021-21184: Inappropriate implementation in performance APIs. Reported by James Hartig on 2020-09-24

[$TBD][1100748] Low CVE-2021-21185: Insufficient policy enforcement in extensions. Reported by David Erceg on 2020-06-30

[$TBD][1153445] Low CVE-2021-21186: Insufficient policy enforcement in QR scanning. Reported by dhirajkumarnifty on 2020-11-28

[$TBD][1155516] Low CVE-2021-21187: Insufficient data validation in URL formatting. Reported by Kirtikumar Anandrao Ramchandani on 2020-12-04

[$N/A][1161739] Low CVE-2021-21188: Use after free in Blink. Reported by Woojin Oh(@pwn_expoit) of STEALIEN on 2020-12-24

[$TBD][1165392] Low CVE-2021-21189: Insufficient policy enforcement in payments. Reported by Khalil Zhani on 2021-01-11

[$TBD][1166091] Low CVE-2021-21190: Uninitialized Use in PDFium. Reported by Zhou Aiting(@zhouat1) of Qihoo 360 Vulcan Team on 2021-01-13

[1183883] Various fixes from internal audits, fuzzing and other initiatives

下載地址

離線安裝包“無(wú)更新組件”版提取原生綠色版方法：

鼠標(biāo)右鍵解壓離線安裝包，此時(shí)會(huì)解壓出來(lái)一個(gè)chrome.7z

再對(duì)chrome.7z解壓就是原生綠色版啦！

“無(wú)更新組件”版離線安裝包不含在線更新升級(jí)功能，所以不會(huì)添加更新計(jì)劃任務(wù)，也沒(méi)有后臺(tái)更新進(jìn)程，更干凈。

Google Chrome v89.0.4389.82 官方正式版 離線安裝包（無(wú)更新組件）64位

https://dl.google.com/release2/chrome/eUubyeM3_OTyvPLnCx9WHQ_89.0.4389.82/89.0.4389.82_chrome_installer.exe

https://www.google.com/dl/release2/chrome/eUubyeM3_OTyvPLnCx9WHQ_89.0.4389.82/89.0.4389.82_chrome_installer.exe

https://redirector.gvt1.com/edgedl/release2/chrome/eUubyeM3_OTyvPLnCx9WHQ_89.0.4389.82/89.0.4389.82_chrome_installer.exe

Google Chrome v89.0.4389.82 官方正式版 離線安裝包（無(wú)更新組件）32位

https://dl.google.com/release2/chrome/KiHz4iHxqnLcm5Q8ekHyHQ_89.0.4389.82/89.0.4389.82_chrome_installer.exe

https://www.google.com/dl/release2/chrome/KiHz4iHxqnLcm5Q8ekHyHQ_89.0.4389.82/89.0.4389.82_chrome_installer.exe

https://redirector.gvt1.com/edgedl/release2/chrome/KiHz4iHxqnLcm5Q8ekHyHQ_89.0.4389.82/89.0.4389.82_chrome_installer.exe

Google Chrome v89.0.4389.82 官方正式版 離線安裝包（含更新組件）64位

https://dl.google.com/edgedl/chrome/install/GoogleChromeStandaloneEnterprise64.MSI

Google Chrome v89.0.4389.82 官方正式版 離線安裝包（含更新組件）32位

https://dl.google.com/edgedl/chrome/install/GoogleChromeStandaloneEnterprise.msi

Google Chrome 官方正式版 離線安裝包（含更新組件）新版及歷史版本

https://www.lanzous.com/b138066

https://pan.baidu.com/s/1Q5FptUnS0BjGMk5erwOhyw?提取碼：36oz

[超站]友情鏈接：

四季很好，只要有你，文娛排行榜：https://www.yaopaiming.com/
關(guān)注數(shù)據(jù)與安全，洞悉企業(yè)級(jí)服務(wù)市場(chǎng)：https://www.ijiandao.com/