PT-2021-4610

CVE-2021-30518

·

تاريخ النشر

2021-04-28

·

تاريخ التحديث

2026-10-31

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.212
Description The issue is related to a heap buffer overflow in Reader Mode, which can be exploited by a remote attacker using a specially crafted HTML page. This could allow the attacker to access confidential data, compromise data integrity, and cause a denial of service. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For Google Chrome versions prior to 90.0.4430.212, update to version 90.0.4430.212 or later to resolve the issue. As a temporary workaround, consider avoiding the use of Reader Mode until a patch is available. Restrict access to crafted HTML pages to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2021-1876
ALT-PU-2021-1972
ALT-PU-2021-2007
ALT-PU-2021-2009
ALT-PU-2021-2141
CLEANSTART-2024-VY13972
DSA-4917-1
OPENSUSE-SU-2021:0742-1
OPENSUSE-SU-2021_0742-1
OPENSUSE-SU-2021:0762-1
OPENSUSE-SU-2021_0762-1
OPENSUSE-SU-2021:0828-1
OPENSUSE-SU-2021_0828-1
OPENSUSE-SU-2021:0829-1
OPENSUSE-SU-2021_0829-1
OPENSUSE-SU-2022:0110-1
OPENSUSE-SU-2022_0110-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾