PT-2021-3764 · Google+3 · Google Chrome+3
Published
2021-07-15
·
Updated
2025-10-24
·
CVE-2021-30563
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 91.0.4472.164
Description
The issue is related to a Type Confusion in the V8 JavaScript engine, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability is being exploited in the wild. The estimated number of potentially affected devices is not specified.
Recommendations
For Google Chrome versions prior to 91.0.4472.164, update to version 91.0.4472.164 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages until the update is applied.
Exploit
Fix
Incorrect Type Conversion or Cast
Type Confusion
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Google Chrome
Suse