Exploit / PoCcriticalExploited in the wild

Google fixed the 17th zero-day in Chrome since the start of the year

Security Affairsby @securityaffairsDec 14, 2021 · 08:11 UTC (Dec 14, 2021)1 min read4 · 2 reads

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Tags: cve-2021-4102 cve-2021-21148 cve-2021-21166 cve-2021-21193 cve-2021-21220 exploit

Vulnerabilities mentioned

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21148	Heap Buffer Overflow in Google Chrome/Chromium V8 (CVE-2021-21148)	8.8	20%	KEV	Feb 9, 2021 KEV Nov 3, 2021
CVE-2021-21166	Race Condition Heap Corruption in Google Chromium (Chrome, Edge, Opera)	8.8	24%	KEV	Mar 9, 2021 KEV Nov 3, 2021
CVE-2021-21193	Use-After-Free in Google Chromium Blink Engine Actively Exploited	8.8	10%	KEV	Mar 16, 2021 KEV Nov 3, 2021
CVE-2021-21224 +1 related CVE CVE-2021-21220	Type Confusion RCE in Google Chrome/Chromium V8 JavaScript Engine	8.8	84%	KEVPoC	Apr 26, 2021 KEV Nov 3, 2021
CVE-2021-30551	V8 Type Confusion Zero-Day in Google Chrome (CVE-2021-30551), Exploited in the Wild	8.8	65%	KEVPoC	Jun 15, 2021 KEV Nov 3, 2021
CVE-2021-30554	Use-After-Free in Google Chrome WebGL Exploited in the Wild (CVE-2021-30554)	8.8	7%	KEV	Jul 2, 2021 KEV Nov 3, 2021
CVE-2021-30563	Type Confusion in Google Chrome V8 Engine Exploited in the Wild	8.8	9%	KEV	Aug 3, 2021 KEV Nov 3, 2021
CVE-2021-30632 +1 related CVE CVE-2021-37975	Out-of-Bounds Write in Google Chrome V8 JavaScript Engine (CVE-2021-30632)	8.8	63%	KEV	Oct 8, 2021 KEV Nov 3, 2021
CVE-2021-30633	Use-After-Free Sandbox Escape in Chromium Indexed DB API	9.6	33%	KEV	Oct 8, 2021 KEV Nov 3, 2021
CVE-2021-37973	Use-After-Free Sandbox Escape in Google Chrome/Chromium Portals	9.6	12%	KEV	Oct 8, 2021 KEV Nov 3, 2021
CVE-2021-37976	Information Disclosure in Google Chrome/Chromium Memory Implementation (CVE-2021-37976)	6.5	20%	KEVPoC	Oct 8, 2021 KEV Nov 3, 2021
CVE-2021-38000	Improper Input Validation in Google Chrome for Android Allows Forced URL Navigation	6.1	5%	KEVPoC	Nov 23, 2021 KEV Nov 3, 2021
CVE-2021-38003	Memory Corruption in Chromium V8 JSON.stringify Affects Chrome, Edge, Opera	8.8	39%	KEVPoC	Nov 23, 2021 KEV Nov 3, 2021
CVE-2021-4101 +3 related CVEs CVE-2021-4100 CVE-2021-4099 CVE-2021-4098	Heap buffer overflow in Swiftshader in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	8.8 group max	1%		Feb 11, 2022
CVE-2021-4102	Use-After-Free Zero-Day in Google Chrome's V8 JavaScript Engine	8.8	8%	KEV	Feb 11, 2022 KEV Dec 15, 2021

From the original article

1 min read at securityaffairs.com

Google has released Chrome 96. 0. 4664.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.