CVE-2021-30528

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 91.0.4472.77

Description The issue is related to a use after free vulnerability in the WebAuthentication component of Google Chrome. This could allow a remote attacker who has compromised the renderer process of a user, particularly one who has saved a credit card in their Google account, to potentially exploit heap corruption via a crafted HTML page.

Recommendations For Google Chrome on Android versions prior to 91.0.4472.77, update to version 91.0.4472.77 or later to resolve the issue. As a temporary workaround, consider avoiding the use of saved credit cards in Google accounts until the update is applied. Restrict access to potentially vulnerable WebAuthentication components to minimize the risk of exploitation.