PT-2021-3717

CVE-2021-30587

Published

2021-07-20

Updated

2026-10-31

Description by

CVSS 2.0

9.4

High

MetricsAV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107

Description The issue is related to an inappropriate implementation in Compositing, allowing a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This could lead to unauthorized access to protected information.

Recommendations For versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Abdulrahman Alqabandi

Vendors

Affected products

Weakness enumeration

CWE-358: Improperly Implemented Security Check for Standard

Related identifiers