PT-2021-3703 · Google+3 · Google Chrome+3
Richard Wheeldon
·
Published
2021-07-15
·
Updated
2024-06-15
·
CVE-2021-30541
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 91.0.4472.164
Description
The issue is related to a use after free in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker could potentially exploit this issue by using a crafted HTML page, resulting in a denial of service.
Recommendations
For versions prior to 91.0.4472.164, update to version 91.0.4472.164 or later to resolve the issue.
As a temporary workaround, consider restricting access to potentially malicious HTML pages until the update is applied.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Google Chrome
Suse