# Google rolls out Chrome security update to patch active zero-day vulnerability (HT Tech)

> Chrome users can update to v86.0.4240.111 via the browser's built-in update function. And we reccomend you do it right now.

# Google rolls out Chrome security update to patch active zero-day vulnerability

## Chrome users can update to v86.0.4240.111 via the browser's built-in update function. And we reccomend you do it right now.

Oct 21 2020, 16:00 IST

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook.png)

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook-hover.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Share.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Shareclicked.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp-hover.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter-hover.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook-hover.png)

![Bookmark](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmark.png)

![Bookmarked](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmarked.png)

![Project Zero, which is one of Google’s internal security teams, discovered these attacks that were leveraging the FreeType bug.](https://images.hindustantimes.com/tech/img/2020/10/21/1600x900/https___specials-images.forbesimg.com_imageserve_1188076554_0x0_1603276023000_1603276033659.jpg)

Project Zero, which is one of Google’s internal security teams, discovered these attacks that were leveraging the FreeType bug. (Forbes)

![Author Photo](https://images.hindustantimes.com/tech/static/revamp/images/png/HTTech-new-circle-logo.png)

### By HT TECH

Google has rolled out Chrome version 86.0.4240.111 which brings about security fixes, including a patch for an actively exploited zero-day vulnerability.

As per the ZDNet report, the zero-day vulnerability is tracked as CVE-2020-15999 and is described as “a memory corruption bug in the FreeType font rendering library that's included with standard Chrome distributions”.

Project Zero, which is one of Google’s internal security teams, discovered these attacks that were leveraging the FreeType bug. Project Zero team lead Ben Hawkes also pointed out a threat actor that was abusing this FreeType bug to mount attacks against Chrome users.

Also read

click here.

Hawkes has urged all app vendors to use the same FreeType library to update their software in case the threat actor “decides to shift attacks against other apps”.

A patch for this bug has been included in FreeType 2.10.4 and has been released.

Also Read: Google Chrome’s Dinosaur game has a new rival, and it is actually better

Chrome users can update to v86.0.4240.111 via the browser's built-in update function. Go to Chrome ‘Menu’, click on ‘Help’ and then go the ‘About Google Chrome’ option for the update.

ZDNet states that the finer details about CVE-2020-15999 active exploitation attempts have not been made public yet and that Google usually “sits on technical details for months to give users enough time to update and keep even the smallest clues from falling into attackers' hands”.

However, since the patch for this zero-day is visible in the source code of FreeType, which is an open source project, it's “expected that threat actors will be able to reverse-engineer the zero-day and come up with their own exploits within days or weeks”.

CVE-2020-15999 is the third Chrome zero-day exploited in the wild in the past twelve months. The first two were CVE-2019-13720 (which happened in October 2019) and CVE-2020-6418 (which happened in February 2020).

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

21 Oct, 16:00 IST

google chrome

google

![HT Tech Awards](https://tech.hindustantimes.com/ht-tech-power-list-awards-2026/httech-awards-banner-new.webp)

### Related Stories

07 Oct 2026

06 Oct 2026

71,603,275,650,591

NEXT ARTICLE BEGINS

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Tips & Tricks

![Ghibli-style art](https://images.hindustantimes.com/tech/img/2025/03/28/414x233/ChatGPT_Ghibli_style_images_1743161814450_1743161814596.jpg)

### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide

![How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide](https://images.hindustantimes.com/tech/img/2025/02/14/414x233/invites_1738728829564_1739543695649.png)

### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide

![Apple TV app arrives on Android phones and tablets: What you get and how to install it](https://images.hindustantimes.com/tech/img/2025/02/13/414x233/unnamed_1739426557335_1739426567634.jpg)

### Apple TV app arrives on Android phones and tablets: What you get and how to install it

![Vodafone Idea OTT plans](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how

![Android data transfer methods](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to transfer data from one Android to another using Google backup, USB-C cable, and more

## Editor’s Pick

![iPhone 16e launched with A18 chip, Apple AI—bringing flagship power on a budget: Check specs, price](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 16e launched in India: All details about the new budget mobile from Apple

![DeepSeek was founded in China with only a fraction of the budget of the top AI companies in the US.](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained

![iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on

![Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini

![iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update

## Trending Stories

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Infinix Note 50s 5G+](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Apple Intelligence AI training](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![CMF Buds 2](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

keep up with tech

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

![Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-twitter.png)

![WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-whatsApp.png)

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

## Gaming

![Check out these five gaming monitors under  <span class='webrupee'>₹</span>20,000,](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Top 5 gaming monitors under ₹20000 you should consider

![gaming consoles](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off

![Pokémon GO Wild Area 2025](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges

![Shade Silver](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Shade Silver free on Steam for a limited time: Here’s how to get it

![Call of duty](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Trending News

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.livemint.com/static/static/1x1_img.gif)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Infinix Note 50s 5G+](https://images.livemint.com/static/static/1x1_img.gif)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.livemint.com/static/static/1x1_img.gif)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![Apple Intelligence AI training](https://images.livemint.com/static/static/1x1_img.gif)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

![CMF Buds 2](https://images.livemint.com/static/static/1x1_img.gif)

## Trending Gadgets

Mobiles

Laptops

Tablets

![HT Tech](https://images.hindustantimes.com/tech/static/revamp/images/png/HT_tech-new.gif)

- https://tech.hindustantimes.com/tech/news/google-rolls-out-chrome-security-update-to-patch-active-zero-day-vulnerability-71603275650591.html