Vulnerabilityhigh

Chinese experts earned $20,000 for reporting a Chrome Sandbox Escape

Security Affairsby @securityaffairsMar 31, 2021 · 14:56 UTC (Mar 31, 2021)2 min read2

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-21194 CVE-2021-21195 CVE-2021-21196 CVE-2021-21197 CVE-2021-21198 CVE-2021-21199 CVE-2020-16004

Tags: cve-2021-21194 cve-2021-21195 cve-2021-21196 cve-2021-21197 cve-2021-21198 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-16004	Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	8.8	2%		Nov 3, 2020
CVE-2021-21197 +5 related CVEs CVE-2021-21195 CVE-2021-21196 CVE-2021-21194 CVE-2021-21199 CVE-2021-21198	Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	8.8 group max	1%		Apr 9, 2021

From the original article

2 min read at securityaffairs.com

Researchers have reported to Google a sandbox escape vulnerability in the Chrome web browser to Google that awarded them $20,000. Experts from the Chinese cybersecurity company Qihoo 360 have reported to Google another sandbox escape vulnerability (CVE-2021-21194) affecting the Chrome web browser.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.