PT-2021-5623

CVE-2021-37957

·

Published

2021-09-21

·

Updated

2024-06-15

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 94.0.4606.54
Description The issue is related to a use after free in WebGPU, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This could enable the attacker to bypass existing security restrictions.
Recommendations For versions prior to 94.0.4606.54, update to version 94.0.4606.54 or later to resolve the issue. As a temporary workaround, consider restricting access to WebGPU API until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2021-2909
ALT-PU-2021-2987
ALT-PU-2021-2988
ALT-PU-2021-3044
ALT-PU-2021-3050
ALT-PU-2021-3436
ALT-PU-2021-3603
DSA-5046-1
OPENSUSE-SU-2021:1339-1
OPENSUSE-SU-2021:1350-1
OPENSUSE-SU-2021_1350-1
OPENSUSE-SU-2024:11555-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾