CVE-2021-30602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.159

Description The issue is related to a use after free in WebRTC, which allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service using a specially crafted HTML page.

Recommendations For Google Chrome versions prior to 92.0.4515.159, update to version 92.0.4515.159 or later to resolve the issue. As a temporary workaround, consider restricting access to WebRTC functionality until a patch is applied. Avoid using crafted HTML pages that could exploit the heap corruption vulnerability.