Chromebox,chromebox( 二 )


虽然这三项改变带来了某些改进,但第一项改变并没有解决主要问题:自动登陆默认情况下依然处于启用状态 。此外Google还在Chrome70中新增了一系列新的功能 。这款拥有10亿用户的浏览器在Windows 平台上现在支持Progressive WebApps(PWA) 。用户可以从开始菜单中触发这些应用,并且能够和其他已经安装的应用一样运行 。
Google今年早些时候已经停止Chrome应用,现在将开发重心放在PWA上 。AV1是Alliancefor Open Media开发的免版税编解码器 。与编解码器VP9相比,AV1的压缩效率提高了30%以上 。Chrome70新增了AV1解码器(不包括编码功能) 。用户可前往YouTube的TestTube页面,选择 “Prefer AV1 forSD”或者“Always Prefer AV1”,然后从 AV1 Beta Launch播放列表中播放片段 。
此外Chrome 70还修复了23处安全漏洞,包括:[$N/A][888926] HighCVE-2018-17462: Sandbox escape in AppCache. Reported by Ned Williamsonand Niklas Baumstark working with Beyond Security’s SecuriTeam SecureDisclosure program on 2018-09-25[$N/A][888923] HighCVE-2018-17463: Remote code execution in V8. Reported by Ned Williamsonand Niklas Baumstark working with Beyond Security’s SecuriTeam SecureDisclosure program on 2018-09-25[$3500][872189] High CVE tobe assigned: Heap buffer overflow in Little CMS in PDFium. Reported byQuang Nguy?n (@quangnh89) of Viettel Cyber Security on 2018-08-08[$3000][887273] High CVE-2018-17464: URL spoof in Omnibox. Reported by xisigr of Tencent’s Xuanwu Lab on 2018-09-20[$3000][870226] High CVE-2018-17465: Use after free in V8. Reported by Lin Zuojian on 2018-08-02[$1000][880906] High CVE-2018-17466: Memory corruption in Angle. Reported by Omair on 2018-09-05[$3000][844881] Medium CVE-2018-17467: URL spoof in Omnibox. Reported by Khalil Zhani on 2018-05-19[$2000][876822] MediumCVE-2018-17468: Cross-origin URL disclosure in Blink. Reported by JamesLee (@Windowsrcer) of Kryptos Logic on 2018-08-22[$1000][880675] Medium CVE-2018-17469: Heap buffer overflow in PDFium. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-09-05[$1000][877874] MediumCVE-2018-17470: Memory corruption in GPU Internals. Reported by ZheJin(金哲),Luyao Liu(刘路遥) from Chengdu Security Response Center of Qihoo360 Technology Co. Ltd on 2018-08-27[$1000][873080] Medium CVE-2018-17471: Security UI occlusion in full screen mode. Reported by Lnyas Zhang on 2018-08-10[$1000][822518] Medium CVE-2018-17472: iframe sandbox escape on iOS. Reported by Jun Kokatsu (@shhnjk) on 2018-03-16[$500][882078] Medium CVE-2018-17473: URL spoof in Omnibox. Reported by Khalil Zhani on 2018-09-08[$500][843151] MediumCVE-2018-17474: Use after free in Blink. Reported by Zhe Jin(金哲),LuyaoLiu(刘路遥) from Chengdu Security Response Center of Qihoo 360 TechnologyCo. Ltd on 2018-05-15[$500][852634] Low CVE-2018-17475: URL spoof in Omnibox. Reported by Vladimir Metnew on 2018-06-14[$500][812769] Low CVE-2018-17476: Security UI occlusion in full screen mode. Reported by Khalil Zhani on 2018-02-15[$500][805496] Low CVE-2018-5179: Lack of limits on update() in ServiceWorker. Reported by Yannic Bonenberger on 2018-01-24[$N/A][863703] Low CVE-2018-17477: UI spoof in Extensions. Reported by Aaron Muir Hamilton

推荐阅读