2 ms·
>On October 20, Google also released a security update for Chrome to patch CVE-2020-15999, a zero-day in Chrome's FreeType font rendering library. >As Google r
by nyanpasu64 6y ago
>On October 20, Google also released a security update for Chrome to patch CVE-2020-15999, a zero-day in Chrome's FreeType font rendering library.
>As Google revealed last week on Friday, this Chrome zero-day was utilized together with a Windows zero-day (CVE-2020-17087).
I thought Chrome only used DirectWrite font rendering on Windows, and only used dynamically linked system FreeType on Linux-like platforms. https://bugs.chromium.org/p/chromium/issues/detail?id=670480 https://bugs.chromium.org/p/chromium/issues/detail?id=670480 shows that some people were discussing using FreeType on Windows, but it doesn't seem to have resulted in any actions.