Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-30588 (GCVE-0-2021-30588)
Vulnerability from cvelistv5 – Published: 2021-08-03 19:41 – Updated: 2024-08-03 22:40
VLAI?
EPSS
Summary
Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Severity ?
No CVSS data available.
CWE
- Type Confusion
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://chromereleases.googleblog.com/2021/07/sta… | x_refsource_MISC |
| https://crbug.com/1195650 | x_refsource_MISC |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
| https://lists.fedoraproject.org/archives/list/pac… | vendor-advisoryx_refsource_FEDORA |
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T22:40:31.645Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://crbug.com/1195650"
},
{
"name": "FEDORA-2021-78b9d84299",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/"
},
{
"name": "FEDORA-2021-6225d60814",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/"
},
{
"name": "FEDORA-2021-02b301441f",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA",
"x_transferred"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "92.0.4515.107",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Type Confusion",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-09-24T22:06:31.000Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://crbug.com/1195650"
},
{
"name": "FEDORA-2021-78b9d84299",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/"
},
{
"name": "FEDORA-2021-6225d60814",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/"
},
{
"name": "FEDORA-2021-02b301441f",
"tags": [
"vendor-advisory",
"x_refsource_FEDORA"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2021-30588",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "92.0.4515.107"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Type Confusion"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"name": "https://crbug.com/1195650",
"refsource": "MISC",
"url": "https://crbug.com/1195650"
},
{
"name": "FEDORA-2021-78b9d84299",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/"
},
{
"name": "FEDORA-2021-6225d60814",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/"
},
{
"name": "FEDORA-2021-02b301441f",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2021-30588",
"datePublished": "2021-08-03T19:41:19.000Z",
"dateReserved": "2021-04-13T00:00:00.000Z",
"dateUpdated": "2024-08-03T22:40:31.645Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2021-30588",
"date": "2026-05-19",
"epss": "0.00597",
"percentile": "0.69604"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"92.0.4515.107\", \"matchCriteriaId\": \"D3B28B79-DBC9-423C-B8C7-338CE3A1805F\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A930E247-0B43-43CB-98FF-6CE7B8189835\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"}, {\"lang\": \"es\", \"value\": \"Una confusi\\u00f3n de tipo en V8 en Google Chrome anterior a versi\\u00f3n 92.0.4515.107, permit\\u00eda a un atacante remoto explotar una corrupci\\u00f3n de la pila por medio de una p\\u00e1gina HTML dise\\u00f1ada\"}]",
"id": "CVE-2021-30588",
"lastModified": "2024-11-21T06:04:14.553",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2021-08-03T20:15:09.403",
"references": "[{\"url\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1195650\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/\", \"source\": \"chrome-cve-admin@google.com\"}, {\"url\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1195650\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Exploit\", \"Issue Tracking\", \"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}]",
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-843\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-30588\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2021-08-03T20:15:09.403\",\"lastModified\":\"2024-11-21T06:04:14.553\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"},{\"lang\":\"es\",\"value\":\"Una confusi\u00f3n de tipo en V8 en Google Chrome anterior a versi\u00f3n 92.0.4515.107, permit\u00eda a un atacante remoto explotar una corrupci\u00f3n de la pila por medio de una p\u00e1gina HTML dise\u00f1ada\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"92.0.4515.107\",\"matchCriteriaId\":\"D3B28B79-DBC9-423C-B8C7-338CE3A1805F\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E460AA51-FCDA-46B9-AE97-E6676AA5E194\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A930E247-0B43-43CB-98FF-6CE7B8189835\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80E516C0-98A4-4ADE-B69F-66A772E2BAAA\"}]}]}],\"references\":[{\"url\":\"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1195650\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/\",\"source\":\"chrome-cve-admin@google.com\"},{\"url\":\"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1195650\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Exploit\",\"Issue Tracking\",\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
CERTFR-2021-AVI-554
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Contournement provisoire
- Google Chrome versions antérieures à 92.0.4515.107
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n\n## Contournement provisoire\n\n- Google Chrome versions ant\u00e9rieures \u00e0 92.0.4515.107\n",
"cves": [
{
"name": "CVE-2021-30567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30567"
},
{
"name": "CVE-2021-30575",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30575"
},
{
"name": "CVE-2021-30587",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30587"
},
{
"name": "CVE-2021-30586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30586"
},
{
"name": "CVE-2021-30583",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30583"
},
{
"name": "CVE-2021-30582",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30582"
},
{
"name": "CVE-2021-30572",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30572"
},
{
"name": "CVE-2021-30581",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30581"
},
{
"name": "CVE-2021-30580",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30580"
},
{
"name": "CVE-2021-30578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30578"
},
{
"name": "CVE-2021-30577",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30577"
},
{
"name": "CVE-2021-30571",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30571"
},
{
"name": "CVE-2021-30574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30574"
},
{
"name": "CVE-2021-30579",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30579"
},
{
"name": "CVE-2021-30573",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30573"
},
{
"name": "CVE-2021-30585",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30585"
},
{
"name": "CVE-2021-30565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30565"
},
{
"name": "CVE-2021-30566",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30566"
},
{
"name": "CVE-2021-30589",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30589"
},
{
"name": "CVE-2021-30584",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30584"
},
{
"name": "CVE-2021-30588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30588"
},
{
"name": "CVE-2021-30569",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30569"
},
{
"name": "CVE-2021-30568",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30568"
},
{
"name": "CVE-2021-30576",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30576"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-554",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-21T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 20 juillet 2021",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
}
]
}
CERTFR-2021-AVI-566
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge (Chromium-based) versions ant\u00e9rieures \u00e0 92.0.902.55",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30567"
},
{
"name": "CVE-2021-36929",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36929"
},
{
"name": "CVE-2021-30575",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30575"
},
{
"name": "CVE-2021-30587",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30587"
},
{
"name": "CVE-2021-36928",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36928"
},
{
"name": "CVE-2021-30586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30586"
},
{
"name": "CVE-2021-30583",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30583"
},
{
"name": "CVE-2021-30582",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30582"
},
{
"name": "CVE-2021-30572",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30572"
},
{
"name": "CVE-2021-30581",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30581"
},
{
"name": "CVE-2021-30580",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30580"
},
{
"name": "CVE-2021-30578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30578"
},
{
"name": "CVE-2021-30577",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30577"
},
{
"name": "CVE-2021-30571",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30571"
},
{
"name": "CVE-2021-30574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30574"
},
{
"name": "CVE-2021-30579",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30579"
},
{
"name": "CVE-2021-30573",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30573"
},
{
"name": "CVE-2021-30585",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30585"
},
{
"name": "CVE-2021-30565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30565"
},
{
"name": "CVE-2021-30566",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30566"
},
{
"name": "CVE-2021-30589",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30589"
},
{
"name": "CVE-2021-30584",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30584"
},
{
"name": "CVE-2021-30588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30588"
},
{
"name": "CVE-2021-30569",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30569"
},
{
"name": "CVE-2021-30568",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30568"
},
{
"name": "CVE-2021-36931",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36931"
},
{
"name": "CVE-2021-30576",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30576"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-566",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30568 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30568"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30583 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30583"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30582 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30582"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-36929 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36929"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30573 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30573"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30586 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30586"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30585 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30585"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30579 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30579"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-36928 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36928"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30567 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30567"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30576 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30576"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30581 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30581"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-36931 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36931"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30572 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30572"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30578 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30578"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30571 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30571"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30580 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30580"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30577 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30577"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30588 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30588"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30589 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30589"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30587 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30587"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30574 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30574"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30566 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30566"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30569 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30569"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30584 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30584"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30575 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30575"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30565 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30565"
}
]
}
CERTFR-2021-AVI-554
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Contournement provisoire
- Google Chrome versions antérieures à 92.0.4515.107
Impacted products
| Vendor | Product | Description |
|---|
References
| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [],
"affected_systems_content": "",
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n\n## Contournement provisoire\n\n- Google Chrome versions ant\u00e9rieures \u00e0 92.0.4515.107\n",
"cves": [
{
"name": "CVE-2021-30567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30567"
},
{
"name": "CVE-2021-30575",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30575"
},
{
"name": "CVE-2021-30587",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30587"
},
{
"name": "CVE-2021-30586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30586"
},
{
"name": "CVE-2021-30583",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30583"
},
{
"name": "CVE-2021-30582",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30582"
},
{
"name": "CVE-2021-30572",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30572"
},
{
"name": "CVE-2021-30581",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30581"
},
{
"name": "CVE-2021-30580",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30580"
},
{
"name": "CVE-2021-30578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30578"
},
{
"name": "CVE-2021-30577",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30577"
},
{
"name": "CVE-2021-30571",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30571"
},
{
"name": "CVE-2021-30574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30574"
},
{
"name": "CVE-2021-30579",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30579"
},
{
"name": "CVE-2021-30573",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30573"
},
{
"name": "CVE-2021-30585",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30585"
},
{
"name": "CVE-2021-30565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30565"
},
{
"name": "CVE-2021-30566",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30566"
},
{
"name": "CVE-2021-30589",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30589"
},
{
"name": "CVE-2021-30584",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30584"
},
{
"name": "CVE-2021-30588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30588"
},
{
"name": "CVE-2021-30569",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30569"
},
{
"name": "CVE-2021-30568",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30568"
},
{
"name": "CVE-2021-30576",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30576"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-554",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-21T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 20 juillet 2021",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
}
]
}
CERTFR-2021-AVI-566
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Microsoft Edge (Chromium-based) versions ant\u00e9rieures \u00e0 92.0.902.55",
"product": {
"name": "Edge",
"vendor": {
"name": "Microsoft",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30567",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30567"
},
{
"name": "CVE-2021-36929",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36929"
},
{
"name": "CVE-2021-30575",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30575"
},
{
"name": "CVE-2021-30587",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30587"
},
{
"name": "CVE-2021-36928",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36928"
},
{
"name": "CVE-2021-30586",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30586"
},
{
"name": "CVE-2021-30583",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30583"
},
{
"name": "CVE-2021-30582",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30582"
},
{
"name": "CVE-2021-30572",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30572"
},
{
"name": "CVE-2021-30581",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30581"
},
{
"name": "CVE-2021-30580",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30580"
},
{
"name": "CVE-2021-30578",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30578"
},
{
"name": "CVE-2021-30577",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30577"
},
{
"name": "CVE-2021-30571",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30571"
},
{
"name": "CVE-2021-30574",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30574"
},
{
"name": "CVE-2021-30579",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30579"
},
{
"name": "CVE-2021-30573",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30573"
},
{
"name": "CVE-2021-30585",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30585"
},
{
"name": "CVE-2021-30565",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30565"
},
{
"name": "CVE-2021-30566",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30566"
},
{
"name": "CVE-2021-30589",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30589"
},
{
"name": "CVE-2021-30584",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30584"
},
{
"name": "CVE-2021-30588",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30588"
},
{
"name": "CVE-2021-30569",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30569"
},
{
"name": "CVE-2021-30568",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30568"
},
{
"name": "CVE-2021-36931",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-36931"
},
{
"name": "CVE-2021-30576",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30576"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-566",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-23T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30568 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30568"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30583 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30583"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30582 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30582"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-36929 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36929"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30573 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30573"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30586 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30586"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30585 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30585"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30579 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30579"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-36928 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36928"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30567 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30567"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30576 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30576"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30581 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30581"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-36931 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-36931"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30572 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30572"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30578 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30578"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30571 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30571"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30580 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30580"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30577 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30577"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30588 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30588"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30589 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30589"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30587 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30587"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30574 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30574"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30566 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30566"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30569 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30569"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30584 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30584"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30575 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30575"
},
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Microsoft CVE-2021-30565 du 22 juillet 2021",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-30565"
}
]
}
BDU:2021-03911
Vulnerability from fstec - Published: 20.07.2021
VLAI Severity ?
Title
Уязвимость обработчика JavaScript-сценариев V8 веб-браузера Google Chrome, позволяющая нарушителю вызвать отказ в обслуживании
Description
Уязвимость обработчика JavaScript-сценариев V8 веб-браузера Google Chrome связана с ошибками преобразования типов данных. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании
Severity ?
Vendor
ООО «РусБИТех-Астра», Google Inc
Software Name
Astra Linux Special Edition (запись в едином реестре российских программ №369), Google Chrome
Software Version
1.6 «Смоленск» (Astra Linux Special Edition), до 92.0.4515.107 (Google Chrome), 1.7 (Astra Linux Special Edition), 4.7 (Astra Linux Special Edition)
Possible Mitigations
Использование рекомендаций:
https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html
Для ОС Astra Linux:
использование рекомендаций производителя: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16
использование рекомендаций производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
использование рекомендаций производителя: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
Reference
https://www.cybersecurity-help.cz/vdb/SB2021072104
https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html
https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
https://crbug.com/1195650
CWE
CWE-843
{
"CVSS 2.0": "AV:N/AC:H/Au:N/C:N/I:N/A:P",
"CVSS 3.0": "AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Google Inc",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (Astra Linux Special Edition), \u0434\u043e 92.0.4515.107 (Google Chrome), 1.7 (Astra Linux Special Edition), 4.7 (Astra Linux Special Edition)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17\n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "20.07.2021",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.09.2024",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "04.08.2021",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2021-03911",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-30588",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), Google Chrome",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.6 \u00ab\u0421\u043c\u043e\u043b\u0435\u043d\u0441\u043a\u00bb (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 4.7 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369)",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 JavaScript-\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 V8 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0421\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u044b\u0435 \u0442\u0438\u043f\u044b (CWE-843)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 JavaScript-\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 V8 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Google Chrome \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0438\u043f\u043e\u0432 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.cybersecurity-help.cz/vdb/SB2021072104\nhttps://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html\nhttps://wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17\nhttps://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47\nhttps://crbug.com/1195650",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-843",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 2,6)\n\u041d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 3,1)"
}
CNVD-2021-55919
Vulnerability from cnvd - Published: 2021-07-28
VLAI Severity ?
Title
Google Chrome V8代码执行漏洞（CNVD-2021-55919）
Description
Google Chrome是美国谷歌（Google）公司的一款Web浏览器。
Google Chrome 92.0.4515.107之前版本中的V8存在安全漏洞。远程攻击者可利用此漏洞在系统上执行任意代码或造成拒绝服务情况。
Severity
高
Patch Name
Google Chrome V8代码执行漏洞（CNVD-2021-55919）的补丁
Patch Description
Google Chrome是美国谷歌（Google）公司的一款Web浏览器。
Google Chrome 92.0.4515.107之前版本中的V8存在安全漏洞。远程攻击者可利用此漏洞在系统上执行任意代码或造成拒绝服务情况。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description
厂商已发布了漏洞修复程序，请及时关注更新： https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html
Reference
https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html
Impacted products
| Name | Google Chrome <92.0.4515.107 |
|---|
{
"cves": {
"cve": {
"cveNumber": "CVE-2021-30588",
"cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-30588"
}
},
"description": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002 \n\nGoogle Chrome 92.0.4515.107\u4e4b\u524d\u7248\u672c\u4e2d\u7684V8\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u60c5\u51b5\u3002",
"formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html",
"isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
"number": "CNVD-2021-55919",
"openTime": "2021-07-28",
"patchDescription": "Google Chrome\u662f\u7f8e\u56fd\u8c37\u6b4c\uff08Google\uff09\u516c\u53f8\u7684\u4e00\u6b3eWeb\u6d4f\u89c8\u5668\u3002 \r\n\r\nGoogle Chrome 92.0.4515.107\u4e4b\u524d\u7248\u672c\u4e2d\u7684V8\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u4ee3\u7801\u6216\u9020\u6210\u62d2\u7edd\u670d\u52a1\u60c5\u51b5\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
"patchName": "Google Chrome V8\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2021-55919\uff09\u7684\u8865\u4e01",
"products": {
"product": "Google Chrome \u003c92.0.4515.107"
},
"referenceLink": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html",
"serverity": "\u9ad8",
"submitTime": "2021-07-21",
"title": "Google Chrome V8\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\uff08CNVD-2021-55919\uff09"
}
FKIE_CVE-2021-30588
Vulnerability from fkie_nvd - Published: 2021-08-03 20:15 - Updated: 2024-11-21 06:04
Severity ?
Summary
Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
References
| URL | Tags | ||
|---|---|---|---|
| chrome-cve-admin@google.com | https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html | Vendor Advisory | |
| chrome-cve-admin@google.com | https://crbug.com/1195650 | Exploit, Issue Tracking, Patch, Third Party Advisory | |
| chrome-cve-admin@google.com | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ | ||
| chrome-cve-admin@google.com | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ | ||
| chrome-cve-admin@google.com | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://crbug.com/1195650 | Exploit, Issue Tracking, Patch, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ | ||
| af854a3a-2127-422b-91ae-364da2661108 | https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| chrome | * | ||
| fedoraproject | fedora | 33 | |
| fedoraproject | fedora | 34 | |
| fedoraproject | fedora | 35 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "D3B28B79-DBC9-423C-B8C7-338CE3A1805F",
"versionEndExcluding": "92.0.4515.107",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"matchCriteriaId": "E460AA51-FCDA-46B9-AE97-E6676AA5E194",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"matchCriteriaId": "A930E247-0B43-43CB-98FF-6CE7B8189835",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"matchCriteriaId": "80E516C0-98A4-4ADE-B69F-66A772E2BAAA",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
},
{
"lang": "es",
"value": "Una confusi\u00f3n de tipo en V8 en Google Chrome anterior a versi\u00f3n 92.0.4515.107, permit\u00eda a un atacante remoto explotar una corrupci\u00f3n de la pila por medio de una p\u00e1gina HTML dise\u00f1ada"
}
],
"id": "CVE-2021-30588",
"lastModified": "2024-11-21T06:04:14.553",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2021-08-03T20:15:09.403",
"references": [
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Exploit",
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://crbug.com/1195650"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/"
},
{
"source": "chrome-cve-admin@google.com",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://crbug.com/1195650"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/"
}
],
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-843"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
GHSA-H8M5-6QP4-4PMM
Vulnerability from github – Published: 2022-05-24 19:09 – Updated: 2022-05-24 19:09
VLAI?
Details
Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
{
"affected": [],
"aliases": [
"CVE-2021-30588"
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2021-08-03T20:15:00Z",
"severity": "HIGH"
},
"details": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"id": "GHSA-h8m5-6qp4-4pmm",
"modified": "2022-05-24T19:09:41Z",
"published": "2022-05-24T19:09:41Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-30588"
},
{
"type": "WEB",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"type": "WEB",
"url": "https://crbug.com/1195650"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L"
}
],
"schema_version": "1.4.0",
"severity": []
}
GSD-2021-30588
Vulnerability from gsd - Updated: 2023-12-13 01:23Details
Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2021-30588",
"description": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"id": "GSD-2021-30588",
"references": [
"https://www.suse.com/security/cve/CVE-2021-30588.html",
"https://security.archlinux.org/CVE-2021-30588"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2021-30588"
],
"details": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"id": "GSD-2021-30588",
"modified": "2023-12-13T01:23:31.555678Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2021-30588",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "92.0.4515.107"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Type Confusion"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"name": "https://crbug.com/1195650",
"refsource": "MISC",
"url": "https://crbug.com/1195650"
},
{
"name": "FEDORA-2021-78b9d84299",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/"
},
{
"name": "FEDORA-2021-6225d60814",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/"
},
{
"name": "FEDORA-2021-02b301441f",
"refsource": "FEDORA",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndExcluding": "92.0.4515.107",
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
},
{
"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2021-30588"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "CWE-843"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html",
"refsource": "MISC",
"tags": [
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html"
},
{
"name": "https://crbug.com/1195650",
"refsource": "MISC",
"tags": [
"Exploit",
"Issue Tracking",
"Patch",
"Third Party Advisory"
],
"url": "https://crbug.com/1195650"
},
{
"name": "FEDORA-2021-78b9d84299",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/"
},
{
"name": "FEDORA-2021-6225d60814",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/"
},
{
"name": "FEDORA-2021-02b301441f",
"refsource": "FEDORA",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"userInteractionRequired": true
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
},
"lastModifiedDate": "2021-12-08T21:55Z",
"publishedDate": "2021-08-03T20:15Z"
}
}
}
OPENSUSE-SU-2021:1131-1
Vulnerability from csaf_opensuse - Published: 2021-08-10 10:23 - Updated: 2021-08-10 10:23Summary
Security update for chromium
Severity
Important
Notes
Title of the patch: Security update for chromium
Description of the patch: This update for chromium fixes the following issues:
Chromium 92.0.4515.131 (boo#1189006)
* CVE-2021-30590: Heap buffer overflow in Bookmarks
* CVE-2021-30591: Use after free in File System API
* CVE-2021-30592: Out of bounds write in Tab Groups
* CVE-2021-30593: Out of bounds read in Tab Strip
* CVE-2021-30594: Use after free in Page Info UI
* CVE-2021-30596: Incorrect security UI in Navigation
* CVE-2021-30597: Use after free in Browser UI
Chromium 92.0.4515.107 (boo#1188590)
* CVE-2021-30565: Out of bounds write in Tab Groups
* CVE-2021-30566: Stack buffer overflow in Printing
* CVE-2021-30567: Use after free in DevTools
* CVE-2021-30568: Heap buffer overflow in WebGL
* CVE-2021-30569: Use after free in sqlite
* CVE-2021-30571: Insufficient policy enforcement in DevTools
* CVE-2021-30572: Use after free in Autofill
* CVE-2021-30573: Use after free in GPU
* CVE-2021-30574: Use after free in protocol handling
* CVE-2021-30575: Out of bounds read in Autofill
* CVE-2021-30576: Use after free in DevTools
* CVE-2021-30577: Insufficient policy enforcement in Installer
* CVE-2021-30578: Uninitialized Use in Media
* CVE-2021-30579: Use after free in UI framework
* CVE-2021-30581: Use after free in DevTools
* CVE-2021-30582: Inappropriate implementation in Animation
* CVE-2021-30584: Incorrect security UI in Downloads
* CVE-2021-30585: Use after free in sensor handling
* CVE-2021-30588: Type Confusion in V8
* CVE-2021-30589: Insufficient validation of untrusted input in Sharing
Patchnames: openSUSE-2021-1131
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
low
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.8 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.3 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.8 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
67 references
| URL | Category |
|---|---|
| https://www.suse.com/support/security/rating/ | external |
| https://ftp.suse.com/pub/projects/security/csaf/o… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://lists.opensuse.org/archives/list/security… | self |
| https://bugzilla.suse.com/1188590 | self |
| https://bugzilla.suse.com/1189006 | self |
| https://www.suse.com/security/cve/CVE-2021-30565/ | self |
| https://www.suse.com/security/cve/CVE-2021-30566/ | self |
| https://www.suse.com/security/cve/CVE-2021-30567/ | self |
| https://www.suse.com/security/cve/CVE-2021-30568/ | self |
| https://www.suse.com/security/cve/CVE-2021-30569/ | self |
| https://www.suse.com/security/cve/CVE-2021-30571/ | self |
| https://www.suse.com/security/cve/CVE-2021-30572/ | self |
| https://www.suse.com/security/cve/CVE-2021-30573/ | self |
| https://www.suse.com/security/cve/CVE-2021-30574/ | self |
| https://www.suse.com/security/cve/CVE-2021-30575/ | self |
| https://www.suse.com/security/cve/CVE-2021-30576/ | self |
| https://www.suse.com/security/cve/CVE-2021-30577/ | self |
| https://www.suse.com/security/cve/CVE-2021-30578/ | self |
| https://www.suse.com/security/cve/CVE-2021-30579/ | self |
| https://www.suse.com/security/cve/CVE-2021-30581/ | self |
| https://www.suse.com/security/cve/CVE-2021-30582/ | self |
| https://www.suse.com/security/cve/CVE-2021-30584/ | self |
| https://www.suse.com/security/cve/CVE-2021-30585/ | self |
| https://www.suse.com/security/cve/CVE-2021-30588/ | self |
| https://www.suse.com/security/cve/CVE-2021-30589/ | self |
| https://www.suse.com/security/cve/CVE-2021-30590/ | self |
| https://www.suse.com/security/cve/CVE-2021-30591/ | self |
| https://www.suse.com/security/cve/CVE-2021-30592/ | self |
| https://www.suse.com/security/cve/CVE-2021-30593/ | self |
| https://www.suse.com/security/cve/CVE-2021-30594/ | self |
| https://www.suse.com/security/cve/CVE-2021-30596/ | self |
| https://www.suse.com/security/cve/CVE-2021-30597/ | self |
| https://www.suse.com/security/cve/CVE-2021-30565 | external |
| https://www.suse.com/security/cve/CVE-2021-30566 | external |
| https://www.suse.com/security/cve/CVE-2021-30567 | external |
| https://www.suse.com/security/cve/CVE-2021-30568 | external |
| https://www.suse.com/security/cve/CVE-2021-30569 | external |
| https://www.suse.com/security/cve/CVE-2021-30571 | external |
| https://www.suse.com/security/cve/CVE-2021-30572 | external |
| https://www.suse.com/security/cve/CVE-2021-30573 | external |
| https://www.suse.com/security/cve/CVE-2021-30574 | external |
| https://www.suse.com/security/cve/CVE-2021-30575 | external |
| https://www.suse.com/security/cve/CVE-2021-30576 | external |
| https://www.suse.com/security/cve/CVE-2021-30577 | external |
| https://www.suse.com/security/cve/CVE-2021-30578 | external |
| https://www.suse.com/security/cve/CVE-2021-30579 | external |
| https://www.suse.com/security/cve/CVE-2021-30581 | external |
| https://www.suse.com/security/cve/CVE-2021-30582 | external |
| https://www.suse.com/security/cve/CVE-2021-30584 | external |
| https://www.suse.com/security/cve/CVE-2021-30585 | external |
| https://www.suse.com/security/cve/CVE-2021-30588 | external |
| https://www.suse.com/security/cve/CVE-2021-30589 | external |
| https://www.suse.com/security/cve/CVE-2021-30590 | external |
| https://bugzilla.suse.com/1189006 | external |
| https://www.suse.com/security/cve/CVE-2021-30591 | external |
| https://bugzilla.suse.com/1189006 | external |
| https://www.suse.com/security/cve/CVE-2021-30592 | external |
| https://bugzilla.suse.com/1189006 | external |
| https://www.suse.com/security/cve/CVE-2021-30593 | external |
| https://bugzilla.suse.com/1189006 | external |
| https://www.suse.com/security/cve/CVE-2021-30594 | external |
| https://bugzilla.suse.com/1189006 | external |
| https://www.suse.com/security/cve/CVE-2021-30596 | external |
| https://bugzilla.suse.com/1189006 | external |
| https://www.suse.com/security/cve/CVE-2021-30597 | external |
| https://bugzilla.suse.com/1189006 | external |
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\nChromium 92.0.4515.131 (boo#1189006)\n\n* CVE-2021-30590: Heap buffer overflow in Bookmarks\n* CVE-2021-30591: Use after free in File System API\n* CVE-2021-30592: Out of bounds write in Tab Groups\n* CVE-2021-30593: Out of bounds read in Tab Strip\n* CVE-2021-30594: Use after free in Page Info UI\n* CVE-2021-30596: Incorrect security UI in Navigation\n* CVE-2021-30597: Use after free in Browser UI\n\nChromium 92.0.4515.107 (boo#1188590)\n\n* CVE-2021-30565: Out of bounds write in Tab Groups\n* CVE-2021-30566: Stack buffer overflow in Printing\n* CVE-2021-30567: Use after free in DevTools\n* CVE-2021-30568: Heap buffer overflow in WebGL\n* CVE-2021-30569: Use after free in sqlite\n* CVE-2021-30571: Insufficient policy enforcement in DevTools\n* CVE-2021-30572: Use after free in Autofill\n* CVE-2021-30573: Use after free in GPU\n* CVE-2021-30574: Use after free in protocol handling\n* CVE-2021-30575: Out of bounds read in Autofill\n* CVE-2021-30576: Use after free in DevTools\n* CVE-2021-30577: Insufficient policy enforcement in Installer\n* CVE-2021-30578: Uninitialized Use in Media\n* CVE-2021-30579: Use after free in UI framework\n* CVE-2021-30581: Use after free in DevTools\n* CVE-2021-30582: Inappropriate implementation in Animation\n* CVE-2021-30584: Incorrect security UI in Downloads\n* CVE-2021-30585: Use after free in sensor handling\n* CVE-2021-30588: Type Confusion in V8\n* CVE-2021-30589: Insufficient validation of untrusted input in Sharing\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1131",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1131-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1131-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QMTT3WQIVTBT7PZKT6YDJXEYNVRRJDO2/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1131-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/QMTT3WQIVTBT7PZKT6YDJXEYNVRRJDO2/"
},
{
"category": "self",
"summary": "SUSE Bug 1188590",
"url": "https://bugzilla.suse.com/1188590"
},
{
"category": "self",
"summary": "SUSE Bug 1189006",
"url": "https://bugzilla.suse.com/1189006"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30565 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30565/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30566 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30566/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30567 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30568 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30569 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30569/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30571 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30572 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30572/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30573 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30573/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30574 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30574/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30575 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30575/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30576 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30576/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30577 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30577/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30578 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30578/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30579 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30579/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30581 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30581/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30582 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30582/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30584 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30584/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30585 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30585/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30588 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30589 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30589/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30590 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30590/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30591 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30591/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30592 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30592/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30593 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30593/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30594 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30594/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30596 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30596/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30597 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30597/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2021-08-10T10:23:44Z",
"generator": {
"date": "2021-08-10T10:23:44Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1131-1",
"initial_release_date": "2021-08-10T10:23:44Z",
"revision_history": [
{
"date": "2021-08-10T10:23:44Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"product": {
"name": "chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"product_id": "chromedriver-92.0.4515.131-lp152.2.116.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-92.0.4515.131-lp152.2.116.1.x86_64",
"product": {
"name": "chromium-92.0.4515.131-lp152.2.116.1.x86_64",
"product_id": "chromium-92.0.4515.131-lp152.2.116.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-92.0.4515.131-lp152.2.116.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64"
},
"product_reference": "chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-92.0.4515.131-lp152.2.116.1.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
},
"product_reference": "chromium-92.0.4515.131-lp152.2.116.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-30565",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30565"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Groups in Google Chrome on Linux and ChromeOS prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30565",
"url": "https://www.suse.com/security/cve/CVE-2021-30565"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30565"
},
{
"cve": "CVE-2021-30566",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30566"
}
],
"notes": [
{
"category": "general",
"text": "Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30566",
"url": "https://www.suse.com/security/cve/CVE-2021-30566"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30566"
},
{
"cve": "CVE-2021-30567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30567"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to open DevTools to potentially exploit heap corruption via specific user gesture.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30567",
"url": "https://www.suse.com/security/cve/CVE-2021-30567"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30567"
},
{
"cve": "CVE-2021-30568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30568"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30568",
"url": "https://www.suse.com/security/cve/CVE-2021-30568"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30568"
},
{
"cve": "CVE-2021-30569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30569"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sqlite in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30569",
"url": "https://www.suse.com/security/cve/CVE-2021-30569"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30569"
},
{
"cve": "CVE-2021-30571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30571"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30571",
"url": "https://www.suse.com/security/cve/CVE-2021-30571"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30571"
},
{
"cve": "CVE-2021-30572",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30572"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30572",
"url": "https://www.suse.com/security/cve/CVE-2021-30572"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30572"
},
{
"cve": "CVE-2021-30573",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30573"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30573",
"url": "https://www.suse.com/security/cve/CVE-2021-30573"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30573"
},
{
"cve": "CVE-2021-30574",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30574"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in protocol handling in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30574",
"url": "https://www.suse.com/security/cve/CVE-2021-30574"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30574"
},
{
"cve": "CVE-2021-30575",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30575"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Autofill in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30575",
"url": "https://www.suse.com/security/cve/CVE-2021-30575"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30575"
},
{
"cve": "CVE-2021-30576",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30576"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30576",
"url": "https://www.suse.com/security/cve/CVE-2021-30576"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30576"
},
{
"cve": "CVE-2021-30577",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30577"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient policy enforcement in Installer in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform local privilege escalation via a crafted file.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30577",
"url": "https://www.suse.com/security/cve/CVE-2021-30577"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30577"
},
{
"cve": "CVE-2021-30578",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30578"
}
],
"notes": [
{
"category": "general",
"text": "Uninitialized use in Media in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30578",
"url": "https://www.suse.com/security/cve/CVE-2021-30578"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30578"
},
{
"cve": "CVE-2021-30579",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30579"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in UI framework in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30579",
"url": "https://www.suse.com/security/cve/CVE-2021-30579"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30579"
},
{
"cve": "CVE-2021-30581",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30581"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30581",
"url": "https://www.suse.com/security/cve/CVE-2021-30581"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30581"
},
{
"cve": "CVE-2021-30582",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30582"
}
],
"notes": [
{
"category": "general",
"text": "Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30582",
"url": "https://www.suse.com/security/cve/CVE-2021-30582"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30582"
},
{
"cve": "CVE-2021-30584",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30584"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Downloads in Google Chrome on Android prior to 92.0.4515.107 allowed a remote attacker to perform domain spoofing via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30584",
"url": "https://www.suse.com/security/cve/CVE-2021-30584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30584"
},
{
"cve": "CVE-2021-30585",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30585"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30585",
"url": "https://www.suse.com/security/cve/CVE-2021-30585"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30585"
},
{
"cve": "CVE-2021-30588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30588"
}
],
"notes": [
{
"category": "general",
"text": "Type confusion in V8 in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30588",
"url": "https://www.suse.com/security/cve/CVE-2021-30588"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "low"
}
],
"title": "CVE-2021-30588"
},
{
"cve": "CVE-2021-30589",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30589"
}
],
"notes": [
{
"category": "general",
"text": "Insufficient validation of untrusted input in Sharing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to bypass navigation restrictions via a crafted click-to-call link.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30589",
"url": "https://www.suse.com/security/cve/CVE-2021-30589"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30589"
},
{
"cve": "CVE-2021-30590",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30590"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in Bookmarks in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30590",
"url": "https://www.suse.com/security/cve/CVE-2021-30590"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30590",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30590"
},
{
"cve": "CVE-2021-30591",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30591"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in File System API in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30591",
"url": "https://www.suse.com/security/cve/CVE-2021-30591"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30591",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30591"
},
{
"cve": "CVE-2021-30592",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30592"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in Tab Groups in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30592",
"url": "https://www.suse.com/security/cve/CVE-2021-30592"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30592",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30592"
},
{
"cve": "CVE-2021-30593",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30593"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30593",
"url": "https://www.suse.com/security/cve/CVE-2021-30593"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30593",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30593"
},
{
"cve": "CVE-2021-30594",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30594"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30594",
"url": "https://www.suse.com/security/cve/CVE-2021-30594"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30594",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30594"
},
{
"cve": "CVE-2021-30596",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30596"
}
],
"notes": [
{
"category": "general",
"text": "Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30596",
"url": "https://www.suse.com/security/cve/CVE-2021-30596"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30596",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30596"
},
{
"cve": "CVE-2021-30597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30597"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30597",
"url": "https://www.suse.com/security/cve/CVE-2021-30597"
},
{
"category": "external",
"summary": "SUSE Bug 1189006 for CVE-2021-30597",
"url": "https://bugzilla.suse.com/1189006"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-92.0.4515.131-lp152.2.116.1.x86_64",
"openSUSE Leap 15.2:chromium-92.0.4515.131-lp152.2.116.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-10T10:23:44Z",
"details": "moderate"
}
],
"title": "CVE-2021-30597"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…