PT-2021-5829

CVE-2021-30546

·

Published

2021-05-08

·

Updated

2026-10-01

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.101
Description The issue is related to a use after free in the Autofill component of Google Chrome, which can be exploited by a remote attacker using a crafted HTML page. This could potentially lead to heap corruption, allowing the attacker to access confidential data, compromise data integrity, or cause a denial of service.
Recommendations For Google Chrome versions prior to 91.0.4472.101, update to version 91.0.4472.101 or later to resolve the issue. As a temporary workaround, consider disabling the Autofill feature until a patch is available. Restrict access to untrusted HTML pages to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2021-1974
ALT-PU-2021-2007
ALT-PU-2021-2068
ALT-PU-2021-2097
ALT-PU-2021-2141
CLEANSTART-2024-MN71637
OPENSUSE-SU-2021:0881-1
OPENSUSE-SU-2021_0881-1
OPENSUSE-SU-2021:0938-1
OPENSUSE-SU-2021:0948-1
OPENSUSE-SU-2021_0948-1
OPENSUSE-SU-2021:0949-1
OPENSUSE-SU-2021_0949-1
OPENSUSE-SU-2022:0110-1
OPENSUSE-SU-2022_0110-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾