PT-2021-3671 · Google+4 · Google Chrome+4

·

CVE-2021-30577

·

تاريخ النشر

2021-07-20

·

تاريخ التحديث

2026-10-01

CVSS v3.1

7.8

عالية

المتجهAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107
Description The issue is related to insufficient policy enforcement in the Installer component of Google Chrome, which can be exploited by a remote attacker to perform local privilege escalation via a crafted file. This can allow the attacker to bypass security restrictions and gain unauthorized access to protected information.
Recommendations For versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue. As a temporary workaround, consider restricting access to the Installer component until a patch is applied.

استغلال

إصلاح

DoS

LPE

Incorrect Permission

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

ALT-PU-2021-2387
ALT-PU-2021-2394
ALT-PU-2021-2409
ALT-PU-2021-2411
ALT-PU-2021-2573
ALT-PU-2021-2574
ALT-PU-2021-2627
BDU:2021-03904
CLEANSTART-2024-LU48204
CVE-2021-30577
OPENSUSE-SU-2021:1131-1
OPENSUSE-SU-2021:1144-1
OPENSUSE-SU-2021_1131-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1

المنتجات المتأثرة

Alt Linux
Astra Linux
Google Chrome
Suse
Ubuntu