PT-2021-3672 · Google+3 · Google Chrome+3

David Erceg · Published 2021-07-20 · Updated 2024-06-15 · CVE-2021-30576

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107

Description The issue is related to a use after free in DevTools, which could allow an attacker to potentially exploit heap corruption via a crafted HTML page if a user is convinced to install a malicious extension. This could enable a remote attacker to gain unauthorized access to protected information by opening a specially crafted malicious web page.

Recommendations For versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue. As a temporary workaround, consider disabling the installation of extensions from untrusted sources to minimize the risk of exploitation. Restrict access to potentially vulnerable DevTools features to minimize the risk of exploitation until the issue is resolved.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2021-2387

ALT-PU-2021-2394

ALT-PU-2021-2409

ALT-PU-2021-2411

ALT-PU-2021-2573

ALT-PU-2021-2574

ALT-PU-2021-2627

BDU:2021-03905

CVE-2021-30576

OPENSUSE-SU-2021:1131-1

OPENSUSE-SU-2021:1144-1

OPENSUSE-SU-2021_1131-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Astra Linux

Google Chrome

Suse

References · 2348

• 🔥 https://github.com/s4e-lab/CVE-2021-30573-PoC-Google-Chrome · Exploit
• 🔥 https://github.com/s4eio/CVE-2021-30573-PoC-Google-Chrome · Exploit
• 🔥 https://github.com/s4e-io/CVE-2021-30573-PoC-Google-Chrome · Exploit
• 🔥 https://github.com/byteofandri/CVE-2021-30573 · Exploit
• 🔥 https://github.com/onsecuredev/CVE-2021-30573 · Exploit
• 🔥 https://github.com/rakhanobe/CVE-2021-30573 · Exploit
• 🔥 https://github.com/thomsdev/CVE-2021-30573 · Exploit
• 🔥 https://github.com/orangmuda/CVE-2021-30573 · Exploit
• 🔥 https://github.com/oxctdev/CVE-2021-30573 · Exploit
• 🔥 https://github.com/byteofjoshua/CVE-2021-30573 · Exploit
• 🔥 https://crbug.com/1194896 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2021:1144-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-30576 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16 · Vendor Advisory