Security News > 2020 > October > Google’s Chrome 86: Critical Payments Bug, Password Checker Among Security Notables

Google is rolling out 35 security fixes, and a new password feature, in Chrome 86 versions for Windows, Mac, Android and iOS users.
Google's latest version of its browser, Chrome 86, is now being rolled out with 35 security fixes - including a critical bug - and a feature that checks if users have any compromised passwords.
All seven high-severity vulnerabilities fixed by Google in Chrome 86 were use-after-free flaws - ranging from ones affecting Chrome's printing, audio, password manager and WebRTC components.
The Android and iOS versions of Chrome 86 will also come with a new security feature, which will send a copy of user's usernames and passwords using a "Special form of encryption." That then lets Google check them against list of passwords known to be compromised.
Google rolled out an iteration of this feature in 2019, when it unveiled the Password Checkup Chrome extension, to alert Chrome browser users of weak or compromised passwords.
News URL
https://threatpost.com/google-chrome-86-critical-payments-bug-password-check/159938/
Related news
- Google Chrome's AI-powered security feature rolls out to everyone (source)
- New details reveal how hackers hijacked 35 Google Chrome extensions (source)
- Google Chrome is making it easier to share specific parts of long PDFs (source)
- The ongoing evolution of the CIS Critical Security Controls (source)
- Google to kill Chrome Sync on older Chrome browser versions (source)
- Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution (source)
- Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104 (source)
- Google patches odd Android kernel security bug amid signs of targeted exploitation (source)
- Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking (source)
- Federal judge tightens DOGE leash over critical Treasury payment system access (source)