Exploit / PoCcriticalExploited in the wild

Google fixes a new Chrome zero

Security Affairsby @securityaffairsSep 14, 2021 · 06:24 UTC (Sep 14, 2021)2 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-21148 CVE-2021-21166 CVE-2021-21193 CVE-2021-21220 CVE-2021-21224 CVE-2021-30551 CVE-2021-30554 CVE-2021-30563 CVE-2021-30632 CVE-2021-30633 CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628 CVE-2021-30629 CVE-2021-30630 CVE-2021-30631

Tags: cve-2021-21148 cve-2021-21166 cve-2021-21193 cve-2021-21220 cve-2021-21224 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21148	Heap Buffer Overflow in Google Chrome/Chromium V8 (CVE-2021-21148)	8.8	20%	KEV	Feb 9, 2021 KEV Nov 3, 2021
CVE-2021-21166	Race Condition Heap Corruption in Google Chromium (Chrome, Edge, Opera)	8.8	24%	KEV	Mar 9, 2021 KEV Nov 3, 2021
CVE-2021-21193	Use-After-Free in Google Chromium Blink Engine Actively Exploited	8.8	10%	KEV	Mar 16, 2021 KEV Nov 3, 2021
CVE-2021-21224 +1 related CVE CVE-2021-21220	Type Confusion RCE in Google Chrome/Chromium V8 JavaScript Engine	8.8	84%	KEVPoC	Apr 26, 2021 KEV Nov 3, 2021
CVE-2021-30551	V8 Type Confusion Zero-Day in Google Chrome (CVE-2021-30551), Exploited in the Wild	8.8	65%	KEVPoC	Jun 15, 2021 KEV Nov 3, 2021
CVE-2021-30554	Use-After-Free in Google Chrome WebGL Exploited in the Wild (CVE-2021-30554)	8.8	7%	KEV	Jul 2, 2021 KEV Nov 3, 2021
CVE-2021-30563	Type Confusion in Google Chrome V8 Engine Exploited in the Wild	8.8	9%	KEV	Aug 3, 2021 KEV Nov 3, 2021
CVE-2021-30625 +5 related CVEs CVE-2021-30626 CVE-2021-30628 CVE-2021-30627 CVE-2021-30629 CVE-2021-30630	Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to…	8.8 group max	10%	PoC	Oct 8, 2021
CVE-2021-30631	Rejected reason: DO NOT USE THIS CANDIDATE NUMBER	—	—		Nov 2, 2021
CVE-2021-30632	Out-of-Bounds Write in Google Chrome V8 JavaScript Engine (CVE-2021-30632)	8.8	63%	KEV	Oct 8, 2021 KEV Nov 3, 2021
CVE-2021-30633	Use-After-Free Sandbox Escape in Chromium Indexed DB API	9.6	33%	KEV	Oct 8, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

Google Chrome 93. 0. 4577.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.