PT-2021-8117 · Google · Google Chrome

Published 2021-06-18 · Updated 2025-01-02 · CVE-2021-38023

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107

Description The issue is related to a use after free vulnerability in the Extensions component of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution or denial of service.

Recommendations For versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue. As a temporary workaround, consider disabling the Extensions component until a patch is available. Restrict access to crafted HTML pages to minimize the risk of exploitation.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2024-07571

CVE-2021-38023

Affected Products

Google Chrome

References · 12

• 🔥 https://issues.chromium.org/issues/40056265 · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-38023 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07571 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38023 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38023 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-38023 · Vendor Advisory
• https://feedly.com/cve/CVE-2021-38023 · Note
• https://twitter.com/CVEnew/status/1838341613300416915 · Twitter Post
• https://vuldb.com/?id.278329 · Note
• https://t.me/cvedetector/6223 · Telegram Post
• https://t.me/cvenotify/95758 · Telegram Post
• https://twitter.com/cracbot/status/1839183207880864154 · Twitter Post