Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-21232 (GCVE-0-2021-21232)
Vulnerability from cvelistv5 – Published: 2021-04-30 20:15 – Updated: 2024-08-03 18:09- Use after free
| URL | Tags |
|---|---|
| https://chromereleases.googleblog.com/2021/04/sta… | x_refsource_MISC |
| https://crbug.com/1175058 | x_refsource_MISC |
| https://security.gentoo.org/glsa/202104-08 | vendor-advisoryx_refsource_GENTOO |
| https://www.debian.org/security/2021/dsa-4911 | vendor-advisoryx_refsource_DEBIAN |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T18:09:14.664Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://crbug.com/1175058"
},
{
"name": "GLSA-202104-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"name": "DSA-4911",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN",
"x_transferred"
],
"url": "https://www.debian.org/security/2021/dsa-4911"
},
{
"name": "FEDORA-2021-c3754414e7",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/"
},
{
"name": "FEDORA-2021-ff893e12c5",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/"
},
{
"name": "FEDORA-2021-35d2bb4627",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "90.0.4430.93",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Use after free",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-05-14T22:06:33.000Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://crbug.com/1175058"
},
{
"name": "GLSA-202104-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"name": "DSA-4911",
"tags": [
"vendor-advisory",
"x_refsource_DEBIAN"
],
"url": "https://www.debian.org/security/2021/dsa-4911"
},
{
"name": "FEDORA-2021-c3754414e7",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/"
},
{
"name": "FEDORA-2021-ff893e12c5",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/"
},
{
"name": "FEDORA-2021-35d2bb4627",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2021-21232",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "90.0.4430.93"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Use after free"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"name": "https://crbug.com/1175058",
"refsource": "MISC",
"url": "https://crbug.com/1175058"
},
{
"name": "GLSA-202104-08",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"name": "DSA-4911",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2021/dsa-4911"
},
{
"name": "FEDORA-2021-c3754414e7",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/"
},
{
"name": "FEDORA-2021-ff893e12c5",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/"
},
{
"name": "FEDORA-2021-35d2bb4627",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2021-21232",
"datePublished": "2021-04-30T20:15:32.000Z",
"dateReserved": "2020-12-21T00:00:00.000Z",
"dateUpdated": "2024-08-03T18:09:14.664Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2021-21232",
"date": "2026-05-19",
"epss": "0.01708",
"percentile": "0.82535"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"90.0.4430.93\", \"matchCriteriaId\": \"4DDD2401-6267-4B1E-BA94-6D79037D5E42\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"36D96259-24BD-44E2-96D9-78CE1D41F956\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A930E247-0B43-43CB-98FF-6CE7B8189835\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"}, {\"lang\": \"es\", \"value\": \"Un uso de la memoria previamente liberada en Dev Tools en Google Chrome versiones anteriores a 90.0.4430.93, permit\\u00eda a un atacante remoto explotar potencialmente una corrupci\\u00f3n de la pila por medio de una p\\u00e1gina HTML dise\\u00f1ada.\"}]",
"id": "CVE-2021-21232",
"lastModified": "2024-11-21T05:47:49.687",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2021-04-30T21:15:08.537",
"references": "[{\"url\": \"https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1175058\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Broken Link\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://security.gentoo.org/glsa/202104-08\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4911\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1175058\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Vendor Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://security.gentoo.org/glsa/202104-08\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.debian.org/security/2021/dsa-4911\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}]",
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-416\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-21232\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2021-04-30T21:15:08.537\",\"lastModified\":\"2024-11-21T05:47:49.687\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"},{\"lang\":\"es\",\"value\":\"Un uso de la memoria previamente liberada en Dev Tools en Google Chrome versiones anteriores a 90.0.4430.93, permit\u00eda a un atacante remoto explotar potencialmente una corrupci\u00f3n de la pila por medio de una p\u00e1gina HTML dise\u00f1ada.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"90.0.4430.93\",\"matchCriteriaId\":\"4DDD2401-6267-4B1E-BA94-6D79037D5E42\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36D96259-24BD-44E2-96D9-78CE1D41F956\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73\"}]}]}],\"references\":[{\"url\":\"https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1175058\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://security.gentoo.org/glsa/202104-08\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4911\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1175058\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Vendor Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://security.gentoo.org/glsa/202104-08\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.debian.org/security/2021/dsa-4911\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]}]}}"
}
}
CERTFR-2021-AVI-317
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 90.0.4430.93",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-21231",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21231"
},
{
"name": "CVE-2021-21229",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21229"
},
{
"name": "CVE-2021-21230",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21230"
},
{
"name": "CVE-2021-21227",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21227"
},
{
"name": "CVE-2021-21228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21228"
},
{
"name": "CVE-2021-21232",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21232"
},
{
"name": "CVE-2021-21233",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21233"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-317",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-04-27T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 26 avril 2021",
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
}
]
}
CERTFR-2021-AVI-331
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge versions ant\u00e9rieures \u00e0 90.0.818.51",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-21231",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21231"
},
{
"name": "CVE-2021-21229",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21229"
},
{
"name": "CVE-2021-21230",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21230"
},
{
"name": "CVE-2021-21227",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21227"
},
{
"name": "CVE-2021-21228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21228"
},
{
"name": "CVE-2021-21232",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21232"
},
{
"name": "CVE-2021-21233",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21233"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-331",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-04-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21228 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21228"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21229 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21229"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21227 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21227"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21231 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21231"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21233 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21233"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21230 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21230"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21232 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21232"
}
]
}
CERTFR-2021-AVI-317
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 90.0.4430.93",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-21231",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21231"
},
{
"name": "CVE-2021-21229",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21229"
},
{
"name": "CVE-2021-21230",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21230"
},
{
"name": "CVE-2021-21227",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21227"
},
{
"name": "CVE-2021-21228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21228"
},
{
"name": "CVE-2021-21232",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21232"
},
{
"name": "CVE-2021-21233",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21233"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-317",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-04-27T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 26 avril 2021",
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
}
]
}
CERTFR-2021-AVI-331
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge versions ant\u00e9rieures \u00e0 90.0.818.51",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-21231",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21231"
},
{
"name": "CVE-2021-21229",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21229"
},
{
"name": "CVE-2021-21230",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21230"
},
{
"name": "CVE-2021-21227",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21227"
},
{
"name": "CVE-2021-21228",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21228"
},
{
"name": "CVE-2021-21232",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21232"
},
{
"name": "CVE-2021-21233",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-21233"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-331",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-04-30T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21228 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21228"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21229 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21229"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21227 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21227"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21231 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21231"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21233 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21233"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21230 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21230"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-21232 du 29 avril 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21232"
}
]
}
BDU:2021-02347
Vulnerability from fstec - Published: 20.04.2021{
"CVSS 2.0": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp, \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, Google Inc, \u0410\u041e \"\u041d\u041f\u041f\u041a\u0422\", \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Microsoft Edge), 10 (Debian GNU/Linux), \u0434\u043e 90.0.4430.93 (Google Chrome), \u0434\u043e 2.1 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), \u0434\u043e 16.01.2023 (\u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\u0414\u043b\u044f Google Chrome:\nhttps://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html\n\n\u0414\u043b\u044f Microsoft Edge:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21232\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://www.security-database.com/detail.php?alert=CVE-2021-21232\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0441\u043d\u043e\u0432\u0430:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f chromium \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 90.0.4430.212+repack-1~deb10u1.osnova2\n\n\u0414\u043b\u044f \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f chromium \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 105.0.5195.125+repack2-1~deb11u1.osnova1.strelets",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "20.04.2021",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "21.11.2023",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "05.05.2021",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2021-02347",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-21232",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Microsoft Edge, Debian GNU/Linux, Google Chrome, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , \u0410\u041e \u00ab\u041a\u043e\u043d\u0446\u0435\u0440\u043d \u0412\u041d\u0418\u0418\u041d\u0421\u00bb \u041e\u0421 \u041e\u041d \u00ab\u0421\u0442\u0440\u0435\u043b\u0435\u0446\u00bb \u0434\u043e 16.01.2023 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21166177)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f (CWE-416)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 Google Chrome \u0438 Microsoft Edge \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0441\u043b\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.cybersecurity-help.cz/vdb/SB2021042703 \nhttps://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-21232\nhttps://security-tracker.debian.org/tracker/CVE-2021-21232\nhttps://www.debian.org/security/2021/dsa-4911\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.1/\nhttps://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-416",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,8)"
}
CNVD-2021-35167
Vulnerability from cnvd - Published: 2021-05-18厂商已发布了漏洞修复程序,请及时关注更新: https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html
| Name | Google Chrome <90.0.4430.93 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2021-21232",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-21232"
}
},
"description": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\n\nGoogle Chrome 90.0.4430.93\u4e4b\u524d\u7248\u672c\u4e2d\u7684Dev Tools\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u60c5\u51b5\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2021-35167",
"openTime": "2021-05-18",
"patchDescription": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002\r\n\r\nGoogle Chrome 90.0.4430.93\u4e4b\u524d\u7248\u672c\u4e2d\u7684Dev Tools\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u60c5\u51b5\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Google Chrome Dev Tools\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
"products": {
"product": "Google Chrome \u003c90.0.4430.93"
},
"referenceLink": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
"serverity": "\u4e2d",
"submitTime": "2021-04-27",
"title": "Google Chrome Dev Tools\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}
FKIE_CVE-2021-21232
Vulnerability from fkie_nvd - Published: 2021-04-30 21:15 - Updated: 2024-11-21 05:47| Vendor | Product | Version | |
|---|---|---|---|
| chrome | * | ||
| fedoraproject | fedora | 32 | |
| fedoraproject | fedora | 33 | |
| fedoraproject | fedora | 34 | |
| debian | debian_linux | 10.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4DDD2401-6267-4B1E-BA94-6D79037D5E42",
"versionEndExcluding": "90.0.4430.93",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"matchCriteriaId": "36D96259-24BD-44E2-96D9-78CE1D41F956",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"matchCriteriaId": "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
},
{
"lang": "es",
"value": "Un uso de la memoria previamente liberada en Dev Tools en Google Chrome versiones anteriores a 90.0.4430.93, permit\u00eda a un atacante remoto explotar potencialmente una corrupci\u00f3n de la pila por medio de una p\u00e1gina HTML dise\u00f1ada."
}
],
"id": "CVE-2021-21232",
"lastModified": "2024-11-21T05:47:49.687",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2021-04-30T21:15:08.537",
"references": [
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"url": "https://crbug.com/1175058"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2021/dsa-4911"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"url": "https://crbug.com/1175058"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2021/dsa-4911"
}
],
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-XJR6-HX73-V76X
Vulnerability from github – Published: 2022-05-24 17:49 – Updated: 2022-05-24 17:49Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
{
"affected": [],
"aliases": [
"CVE-2021-21232"
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-04-30T21:15:00Z",
"severity": "HIGH"
},
"details": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"id": "GHSA-xjr6-hx73-v76x",
"modified": "2022-05-24T17:49:23Z",
"published": "2022-05-24T17:49:23Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-21232"
},
{
"type": "WEB",
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"type": "WEB",
"url": "https://crbug.com/1175058"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"type": "WEB",
"url": "https://www.debian.org/security/2021/dsa-4911"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2021-21232
Vulnerability from gsd - Updated: 2023-12-13 01:23{
"GSD": {
"alias": "CVE-2021-21232",
"description": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"id": "GSD-2021-21232",
"references": [
"https://www.suse.com/security/cve/CVE-2021-21232.html",
"https://www.debian.org/security/2021/dsa-4911",
"https://security.archlinux.org/CVE-2021-21232"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2021-21232"
],
"details": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"id": "GSD-2021-21232",
"modified": "2023-12-13T01:23:11.147123Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2021-21232",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "90.0.4430.93"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Use after free"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"name": "https://crbug.com/1175058",
"refsource": "MISC",
"url": "https://crbug.com/1175058"
},
{
"name": "GLSA-202104-08",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"name": "DSA-4911",
"refsource": "DEBIAN",
"url": "https://www.debian.org/security/2021/dsa-4911"
},
{
"name": "FEDORA-2021-c3754414e7",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/"
},
{
"name": "FEDORA-2021-ff893e12c5",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/"
},
{
"name": "FEDORA-2021-35d2bb4627",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "90.0.4430.93",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2021-21232"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-416"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://crbug.com/1175058",
"refsource": "MISC",
"tags": [
"Broken Link",
"Vendor Advisory"
],
"url": "https://crbug.com/1175058"
},
{
"name": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
"refsource": "MISC",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html"
},
{
"name": "GLSA-202104-08",
"refsource": "GENTOO",
"tags": [
"Third Party Advisory"
],
"url": "https://security.gentoo.org/glsa/202104-08"
},
{
"name": "DSA-4911",
"refsource": "DEBIAN",
"tags": [
"Third Party Advisory"
],
"url": "https://www.debian.org/security/2021/dsa-4911"
},
{
"name": "FEDORA-2021-c3754414e7",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/"
},
{
"name": "FEDORA-2021-ff893e12c5",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/"
},
{
"name": "FEDORA-2021-35d2bb4627",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2021-06-02T17:24Z",
"publishedDate": "2021-04-30T21:15Z"
}
}
}
OPENSUSE-SU-2021:0629-1
Vulnerability from csaf_opensuse - Published: 2021-04-30 19:22 - Updated: 2021-04-30 19:22| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64 | — |
Vendor Fix
|
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for Chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\n- Chromium was updated to 90.0.4430.93 (boo#1184764,boo#1185047,boo#1185398)\n * CVE-2021-21227: Insufficient data validation in V8. \n * CVE-2021-21232: Use after free in Dev Tools. \n * CVE-2021-21233: Heap buffer overflow in ANGLE.\n * CVE-2021-21228: Insufficient policy enforcement in extensions.\n * CVE-2021-21229: Incorrect security UI in downloads.\n * CVE-2021-21230: Type Confusion in V8. \n * CVE-2021-21231: Insufficient data validation in V8.\n * CVE-2021-21222: Heap buffer overflow in V8\n * CVE-2021-21223: Integer overflow in Mojo\n * CVE-2021-21224: Type Confusion in V8\n * CVE-2021-21225: Out of bounds memory access in V8\n * CVE-2021-21226: Use after free in navigation\n * CVE-2021-21201: Use after free in permissions\n * CVE-2021-21202: Use after free in extensions\n * CVE-2021-21203: Use after free in Blink\n * CVE-2021-21204: Use after free in Blink\n * CVE-2021-21205: Insufficient policy enforcement in navigation\n * CVE-2021-21221: Insufficient validation of untrusted input in Mojo\n * CVE-2021-21207: Use after free in IndexedDB\n * CVE-2021-21208: Insufficient data validation in QR scanner\n * CVE-2021-21209: Inappropriate implementation in storage\n * CVE-2021-21210: Inappropriate implementation in Network\n * CVE-2021-21211: Inappropriate implementation in Navigatio \n * CVE-2021-21212: Incorrect security UI in Network Config UI\n * CVE-2021-21213: Use after free in WebMIDI\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-629",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_0629-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:0629-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:0629-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NBOWNTMQCMDYBSMTERFTO5ZSZSUCY7QW/"
},
{
"category": "self",
"summary": "SUSE Bug 11845047",
"url": "https://bugzilla.suse.com/11845047"
},
{
"category": "self",
"summary": "SUSE Bug 1184764",
"url": "https://bugzilla.suse.com/1184764"
},
{
"category": "self",
"summary": "SUSE Bug 1185398",
"url": "https://bugzilla.suse.com/1185398"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21201 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21201/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21202 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21202/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21203 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21203/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21204 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21204/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21205 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21205/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21207 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21207/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21208 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21208/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21209 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21209/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21210 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21210/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21211 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21211/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21212 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21212/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21213 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21213/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21221 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21221/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21222 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21223 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21223/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21224 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21224/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21225 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21225/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21226 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21226/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21227 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21227/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21228 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21228/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21229 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21230 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21230/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21231 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21231/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21232 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-21233 page",
"url": "https://www.suse.com/security/cve/CVE-2021-21233/"
}
],
"title": "Security update for Chromium",
"tracking": {
"current_release_date": "2021-04-30T19:22:32Z",
"generator": {
"date": "2021-04-30T19:22:32Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:0629-1",
"initial_release_date": "2021-04-30T19:22:32Z",
"revision_history": [
{
"date": "2021-04-30T19:22:32Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"product": {
"name": "chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"product_id": "chromedriver-90.0.4430.93-lp152.2.89.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-90.0.4430.93-lp152.2.89.1.x86_64",
"product": {
"name": "chromium-90.0.4430.93-lp152.2.89.1.x86_64",
"product_id": "chromium-90.0.4430.93-lp152.2.89.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-90.0.4430.93-lp152.2.89.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64"
},
"product_reference": "chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-90.0.4430.93-lp152.2.89.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
},
"product_reference": "chromium-90.0.4430.93-lp152.2.89.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-21201",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21201"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21201",
"url": "https://www.suse.com/security/cve/CVE-2021-21201"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21201",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21201"
},
{
"cve": "CVE-2021-21202",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21202"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21202",
"url": "https://www.suse.com/security/cve/CVE-2021-21202"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21202",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21202"
},
{
"cve": "CVE-2021-21203",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21203"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21203",
"url": "https://www.suse.com/security/cve/CVE-2021-21203"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21203",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21203"
},
{
"cve": "CVE-2021-21204",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21204"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21204",
"url": "https://www.suse.com/security/cve/CVE-2021-21204"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21204",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21204"
},
{
"cve": "CVE-2021-21205",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21205"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21205",
"url": "https://www.suse.com/security/cve/CVE-2021-21205"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21205",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21205"
},
{
"cve": "CVE-2021-21207",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21207"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21207",
"url": "https://www.suse.com/security/cve/CVE-2021-21207"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21207",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21207"
},
{
"cve": "CVE-2021-21208",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21208"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21208",
"url": "https://www.suse.com/security/cve/CVE-2021-21208"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21208",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21208"
},
{
"cve": "CVE-2021-21209",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21209"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21209",
"url": "https://www.suse.com/security/cve/CVE-2021-21209"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21209",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21209"
},
{
"cve": "CVE-2021-21210",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21210"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21210",
"url": "https://www.suse.com/security/cve/CVE-2021-21210"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21210",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21210"
},
{
"cve": "CVE-2021-21211",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21211"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21211",
"url": "https://www.suse.com/security/cve/CVE-2021-21211"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21211",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21211"
},
{
"cve": "CVE-2021-21212",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21212"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21212",
"url": "https://www.suse.com/security/cve/CVE-2021-21212"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21212",
"url": "https://bugzilla.suse.com/1184764"
},
{
"category": "external",
"summary": "SUSE Bug 1186458 for CVE-2021-21212",
"url": "https://bugzilla.suse.com/1186458"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21212"
},
{
"cve": "CVE-2021-21213",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21213"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21213",
"url": "https://www.suse.com/security/cve/CVE-2021-21213"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21213",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21213"
},
{
"cve": "CVE-2021-21221",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21221"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21221",
"url": "https://www.suse.com/security/cve/CVE-2021-21221"
},
{
"category": "external",
"summary": "SUSE Bug 1184764 for CVE-2021-21221",
"url": "https://bugzilla.suse.com/1184764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21221"
},
{
"cve": "CVE-2021-21222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21222"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21222",
"url": "https://www.suse.com/security/cve/CVE-2021-21222"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21222",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "critical"
}
],
"title": "CVE-2021-21222"
},
{
"cve": "CVE-2021-21223",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21223"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21223",
"url": "https://www.suse.com/security/cve/CVE-2021-21223"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21223",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "critical"
}
],
"title": "CVE-2021-21223"
},
{
"cve": "CVE-2021-21224",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21224"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21224",
"url": "https://www.suse.com/security/cve/CVE-2021-21224"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21224",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "critical"
}
],
"title": "CVE-2021-21224"
},
{
"cve": "CVE-2021-21225",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21225"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21225",
"url": "https://www.suse.com/security/cve/CVE-2021-21225"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21225",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "critical"
}
],
"title": "CVE-2021-21225"
},
{
"cve": "CVE-2021-21226",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21226"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21226",
"url": "https://www.suse.com/security/cve/CVE-2021-21226"
},
{
"category": "external",
"summary": "SUSE Bug 1185047 for CVE-2021-21226",
"url": "https://bugzilla.suse.com/1185047"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.6,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "critical"
}
],
"title": "CVE-2021-21226"
},
{
"cve": "CVE-2021-21227",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21227"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21227",
"url": "https://www.suse.com/security/cve/CVE-2021-21227"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21227",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21227"
},
{
"cve": "CVE-2021-21228",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21228"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21228",
"url": "https://www.suse.com/security/cve/CVE-2021-21228"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21228",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21228"
},
{
"cve": "CVE-2021-21229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21229"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21229",
"url": "https://www.suse.com/security/cve/CVE-2021-21229"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21229",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21229"
},
{
"cve": "CVE-2021-21230",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21230"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21230",
"url": "https://www.suse.com/security/cve/CVE-2021-21230"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21230",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21230"
},
{
"cve": "CVE-2021-21231",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21231"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21231",
"url": "https://www.suse.com/security/cve/CVE-2021-21231"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21231",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21231"
},
{
"cve": "CVE-2021-21232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21232"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21232",
"url": "https://www.suse.com/security/cve/CVE-2021-21232"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21232",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21232"
},
{
"cve": "CVE-2021-21233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-21233"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-21233",
"url": "https://www.suse.com/security/cve/CVE-2021-21233"
},
{
"category": "external",
"summary": "SUSE Bug 1185375 for CVE-2021-21233",
"url": "https://bugzilla.suse.com/1185375"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-90.0.4430.93-lp152.2.89.1.x86_64",
"openSUSE Leap 15.2:chromium-90.0.4430.93-lp152.2.89.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-04-30T19:22:32Z",
"details": "moderate"
}
],
"title": "CVE-2021-21233"
}
]
}
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.