PT-2021-4313
CVE-2021-30551
·
تاريخ النشر
2021-06-09
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 2.0
9.3
عاليةالمقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 91.0.4472.101
Description
The issue is related to a type confusion in V8, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability is caused by incorrect type handling in the JavaScript engine V8. It has been reported that this vulnerability was exploited in real-world attacks.
Recommendations
For Google Chrome versions prior to 91.0.4472.101, update to version 91.0.4472.101 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that could exploit the type confusion vulnerability in V8. Restrict access to potentially vulnerable web pages to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾