PT-2021-3866

CVE-2021-30583

·

Published

2021-07-20

·

Updated

2026-10-01

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 92.0.4515.107
Description The issue is related to insufficient policy enforcement in image handling, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can enable the attacker to bypass security restrictions and gain unauthorized access to protected information.
Recommendations For Google Chrome on iOS versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.
Exploitability
Exploit
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2021-2387
ALT-PU-2021-2394
ALT-PU-2021-2409
ALT-PU-2021-2411
ALT-PU-2021-2573
ALT-PU-2021-2574
ALT-PU-2021-2627
CLEANSTART-2024-XF14437
Found an issue in the description? Have something to add? Feel free to write us 👾