Exploit / PoCcriticalExploited in the wild

Google Chrome 91.0.4472.164 fixes a new zero

Security Affairsby @securityaffairsJul 16, 2021 · 11:58 UTC (Jul 16, 2021)2 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-30563 CVE-2021-30559 CVE-2021-30541 CVE-2021-30560 CVE-2021-30561 CVE-2021-30562 CVE-2021-30564 CVE-2021-21148 CVE-2021-21166 CVE-2021-21193 CVE-2021-21220 CVE-2021-21224 CVE-2021-30551 CVE-2021-30554

Tags: cve-2021-30563 cve-2021-30559 cve-2021-30541 cve-2021-30560 cve-2021-30561 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-21148	Heap Buffer Overflow in Google Chrome/Chromium V8 (CVE-2021-21148)	8.8	20%	KEV	Feb 9, 2021 KEV Nov 3, 2021
CVE-2021-21166	Race Condition Heap Corruption in Google Chromium (Chrome, Edge, Opera)	8.8	24%	KEV	Mar 9, 2021 KEV Nov 3, 2021
CVE-2021-21193	Use-After-Free in Google Chromium Blink Engine Actively Exploited	8.8	10%	KEV	Mar 16, 2021 KEV Nov 3, 2021
CVE-2021-21224 +1 related CVE CVE-2021-21220	Type Confusion RCE in Google Chrome/Chromium V8 JavaScript Engine	8.8	84%	KEVPoC	Apr 26, 2021 KEV Nov 3, 2021
CVE-2021-30560 +5 related CVEs CVE-2021-30561 CVE-2021-30541 CVE-2021-30564 CVE-2021-30559 CVE-2021-30562	Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page	8.8	21%		Aug 3, 2021
CVE-2021-30551	V8 Type Confusion Zero-Day in Google Chrome (CVE-2021-30551), Exploited in the Wild	8.8	65%	KEVPoC	Jun 15, 2021 KEV Nov 3, 2021
CVE-2021-30554	Use-After-Free in Google Chrome WebGL Exploited in the Wild (CVE-2021-30554)	8.8	7%	KEV	Jul 2, 2021 KEV Nov 3, 2021
CVE-2021-30563	Type Confusion in Google Chrome V8 Engine Exploited in the Wild	8.8	9%	KEV	Aug 3, 2021 KEV Nov 3, 2021

From the original article

2 min read at securityaffairs.com

Google Chrome 91. 0. 4472.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.