Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2021-30563 (GCVE-0-2021-30563)
Vulnerability from cvelistv5 – Published: 2021-08-03 18:25 – Updated: 2025-10-21 23:25- Type Confusion
| URL | Tags | |||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
CISA KEV
Known Exploited Vulnerability - GCVE BCP-07 Compliant
Exploited: Yes
Timestamps
Scope
Evidence
Type: Vendor Report
Signal: Successful Exploitation
Confidence: 80%
Source: cisa-kev
Details
| Cwes | CWE-122 CWE-843 |
|---|---|
| Feed | CISA Known Exploited Vulnerabilities Catalog |
| Product | Chromium V8 |
| Due Date | 2021-11-17 |
| Date Added | 2021-11-03 |
| Vendorproject | |
| Vulnerabilityname | Google Chromium V8 Type Confusion Vulnerability |
| Knownransomwarecampaignuse | Unknown |
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-03T22:32:41.263Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://crbug.com/1228407"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2021-30563",
"options": [
{
"Exploitation": "active"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-01-29T16:52:39.215983Z",
"version": "2.0.3"
},
"type": "ssvc"
}
},
{
"other": {
"content": {
"dateAdded": "2021-11-03",
"reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30563"
},
"type": "kev"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-843",
"description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-21T23:25:39.080Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30563"
}
],
"timeline": [
{
"lang": "en",
"time": "2021-11-03T00:00:00.000Z",
"value": "CVE-2021-30563 added to CISA KEV"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Chrome",
"vendor": "Google",
"versions": [
{
"lessThan": "91.0.4472.164",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Type Confusion",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2021-08-03T18:25:26.000Z",
"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"shortName": "Chrome"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://crbug.com/1228407"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "chrome-cve-admin@google.com",
"ID": "CVE-2021-30563",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Chrome",
"version": {
"version_data": [
{
"version_affected": "\u003c",
"version_value": "91.0.4472.164"
}
]
}
}
]
},
"vendor_name": "Google"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Type Confusion"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html",
"refsource": "MISC",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html"
},
{
"name": "https://crbug.com/1228407",
"refsource": "MISC",
"url": "https://crbug.com/1228407"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
"assignerShortName": "Chrome",
"cveId": "CVE-2021-30563",
"datePublished": "2021-08-03T18:25:27.000Z",
"dateReserved": "2021-04-13T00:00:00.000Z",
"dateUpdated": "2025-10-21T23:25:39.080Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"cisa_known_exploited": {
"cveID": "CVE-2021-30563",
"cwes": "[\"CWE-122\", \"CWE-843\"]",
"dateAdded": "2021-11-03",
"dueDate": "2021-11-17",
"knownRansomwareCampaignUse": "Unknown",
"notes": "https://nvd.nist.gov/vuln/detail/CVE-2021-30563",
"product": "Chromium V8",
"requiredAction": "Apply updates per vendor instructions.",
"shortDescription": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",
"vendorProject": "Google",
"vulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability"
},
"fkie_nvd": {
"cisaActionDue": "2021-11-17",
"cisaExploitAdd": "2021-11-03",
"cisaRequiredAction": "Apply updates per vendor instructions.",
"cisaVulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability",
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"91.0.4472.164\", \"matchCriteriaId\": \"3B0BF7DD-0FAE-4761-B2CD-7D14E83A7B6F\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"}, {\"lang\": \"es\", \"value\": \"Una confusi\\u00f3n de tipo en V8 en Google Chrome versiones anteriores a 91.0.4472.164, permit\\u00eda a un atacante remoto explotar potencialmente una corrupci\\u00f3n de la pila por medio de una p\\u00e1gina HTML dise\\u00f1ada\"}]",
"id": "CVE-2021-30563",
"lastModified": "2024-11-21T06:04:11.440",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"REQUIRED\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:N/C:P/I:P/A:P\", \"baseScore\": 6.8, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.6, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": true}]}",
"published": "2021-08-03T19:15:08.230",
"references": "[{\"url\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1228407\", \"source\": \"chrome-cve-admin@google.com\", \"tags\": [\"Permissions Required\", \"Vendor Advisory\"]}, {\"url\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Release Notes\", \"Vendor Advisory\"]}, {\"url\": \"https://crbug.com/1228407\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Permissions Required\", \"Vendor Advisory\"]}]",
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-843\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2021-30563\",\"sourceIdentifier\":\"chrome-cve-admin@google.com\",\"published\":\"2021-08-03T19:15:08.230\",\"lastModified\":\"2025-10-24T21:04:06.210\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"},{\"lang\":\"es\",\"value\":\"Una confusi\u00f3n de tipo en V8 en Google Chrome versiones anteriores a 91.0.4472.164, permit\u00eda a un atacante remoto explotar potencialmente una corrupci\u00f3n de la pila por medio de una p\u00e1gina HTML dise\u00f1ada\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:N/C:P/I:P/A:P\",\"baseScore\":6.8,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.6,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":true}]},\"cisaExploitAdd\":\"2021-11-03\",\"cisaActionDue\":\"2021-11-17\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Google Chromium V8 Type Confusion Vulnerability\",\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-843\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"91.0.4472.164\",\"matchCriteriaId\":\"3B0BF7DD-0FAE-4761-B2CD-7D14E83A7B6F\"}]}]}],\"references\":[{\"url\":\"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1228407\",\"source\":\"chrome-cve-admin@google.com\",\"tags\":[\"Permissions Required\",\"Vendor Advisory\"]},{\"url\":\"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Release Notes\",\"Vendor Advisory\"]},{\"url\":\"https://crbug.com/1228407\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Permissions Required\",\"Vendor Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30563\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"US Government Resource\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}, {\"url\": \"https://crbug.com/1228407\", \"tags\": [\"x_refsource_MISC\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-03T22:32:41.263Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2021-30563\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-01-29T16:52:39.215983Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30563\"}}}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2021-11-03T00:00:00.000Z\", \"value\": \"CVE-2021-30563 added to CISA KEV\"}], \"references\": [{\"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30563\", \"tags\": [\"government-resource\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-843\", \"description\": \"CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-01-29T16:51:19.910Z\"}}], \"cna\": {\"affected\": [{\"vendor\": \"Google\", \"product\": \"Chrome\", \"versions\": [{\"status\": \"affected\", \"version\": \"unspecified\", \"lessThan\": \"91.0.4472.164\", \"versionType\": \"custom\"}]}], \"references\": [{\"url\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\", \"tags\": [\"x_refsource_MISC\"]}, {\"url\": \"https://crbug.com/1228407\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"text\", \"description\": \"Type Confusion\"}]}], \"providerMetadata\": {\"orgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"shortName\": \"Chrome\", \"dateUpdated\": \"2021-08-03T18:25:26.000Z\"}, \"x_legacyV4Record\": {\"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"version\": {\"version_data\": [{\"version_value\": \"91.0.4472.164\", \"version_affected\": \"\u003c\"}]}, \"product_name\": \"Chrome\"}]}, \"vendor_name\": \"Google\"}]}}, \"data_type\": \"CVE\", \"references\": {\"reference_data\": [{\"url\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\", \"name\": \"https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html\", \"refsource\": \"MISC\"}, {\"url\": \"https://crbug.com/1228407\", \"name\": \"https://crbug.com/1228407\", \"refsource\": \"MISC\"}]}, \"data_format\": \"MITRE\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Type Confusion\"}]}]}, \"data_version\": \"4.0\", \"CVE_data_meta\": {\"ID\": \"CVE-2021-30563\", \"STATE\": \"PUBLIC\", \"ASSIGNER\": \"chrome-cve-admin@google.com\"}}}}",
"cveMetadata": "{\"cveId\": \"CVE-2021-30563\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-10-21T23:25:39.080Z\", \"dateReserved\": \"2021-04-13T00:00:00.000Z\", \"assignerOrgId\": \"ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28\", \"datePublished\": \"2021-08-03T18:25:27.000Z\", \"assignerShortName\": \"Chrome\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2021-AVI-538
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 91.0.4472.164",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30564"
},
{
"name": "CVE-2021-30559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30559"
},
{
"name": "CVE-2021-30561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30561"
},
{
"name": "CVE-2021-30563",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30563"
},
{
"name": "CVE-2021-30541",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30541"
},
{
"name": "CVE-2021-30560",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30560"
},
{
"name": "CVE-2021-30562",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30562"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-538",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 15 juillet 2021",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html"
}
]
}
CERTFR-2021-AVI-538
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Solution
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
None| Title | Publication Time | Tags | |||
|---|---|---|---|---|---|
|
|||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Google Chrome versions ant\u00e9rieures \u00e0 91.0.4472.164",
"product": {
"name": "Chrome",
"vendor": {
"name": "Google",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2021-30564",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30564"
},
{
"name": "CVE-2021-30559",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30559"
},
{
"name": "CVE-2021-30561",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30561"
},
{
"name": "CVE-2021-30563",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30563"
},
{
"name": "CVE-2021-30541",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30541"
},
{
"name": "CVE-2021-30560",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30560"
},
{
"name": "CVE-2021-30562",
"url": "https://www.cve.org/CVERecord?id=CVE-2021-30562"
}
],
"links": [],
"reference": "CERTFR-2021-AVI-538",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2021-07-19T00:00:00.000000"
}
],
"risks": [
{
"description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Google Chrome.\nElles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non\nsp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.\n",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans Google Chrome",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Google du 15 juillet 2021",
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html"
}
]
}
FKIE_CVE-2021-30563
Vulnerability from fkie_nvd - Published: 2021-08-03 19:15 - Updated: 2025-10-24 21:048.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
| URL | Tags | ||
|---|---|---|---|
| chrome-cve-admin@google.com | https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html | Release Notes, Vendor Advisory | |
| chrome-cve-admin@google.com | https://crbug.com/1228407 | Permissions Required, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html | Release Notes, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://crbug.com/1228407 | Permissions Required, Vendor Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30563 | US Government Resource |
{
"cisaActionDue": "2021-11-17",
"cisaExploitAdd": "2021-11-03",
"cisaRequiredAction": "Apply updates per vendor instructions.",
"cisaVulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability",
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3B0BF7DD-0FAE-4761-B2CD-7D14E83A7B6F",
"versionEndExcluding": "91.0.4472.164",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
},
{
"lang": "es",
"value": "Una confusi\u00f3n de tipo en V8 en Google Chrome versiones anteriores a 91.0.4472.164, permit\u00eda a un atacante remoto explotar potencialmente una corrupci\u00f3n de la pila por medio de una p\u00e1gina HTML dise\u00f1ada"
}
],
"id": "CVE-2021-30563",
"lastModified": "2025-10-24T21:04:06.210",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9,
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
},
"published": "2021-08-03T19:15:08.230",
"references": [
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html"
},
{
"source": "chrome-cve-admin@google.com",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"url": "https://crbug.com/1228407"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Release Notes",
"Vendor Advisory"
],
"url": "https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Permissions Required",
"Vendor Advisory"
],
"url": "https://crbug.com/1228407"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"US Government Resource"
],
"url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-30563"
}
],
"sourceIdentifier": "chrome-cve-admin@google.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-843"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
},
{
"description": [
{
"lang": "en",
"value": "CWE-843"
}
],
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary"
}
]
}
OPENSUSE-SU-2021:1073-1
Vulnerability from csaf_opensuse - Published: 2021-07-21 16:31 - Updated: 2021-07-21 16:31{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\nChromium 91.0.4472.164 (boo#1188373)\n\n* CVE-2021-30559: Out of bounds write in ANGLE\n* CVE-2021-30541: Use after free in V8\n* CVE-2021-30560: Use after free in Blink XSLT\n* CVE-2021-30561: Type Confusion in V8\n* CVE-2021-30562: Use after free in WebSerial\n* CVE-2021-30563: Type Confusion in V8\n* CVE-2021-30564: Heap buffer overflow in WebXR\n* Various fixes from internal audits, fuzzing and other initiatives\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1073",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1073-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1073-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EJ7H7GF4VL5FVVVYDBRQ4WEQNAFKJKEK/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1073-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EJ7H7GF4VL5FVVVYDBRQ4WEQNAFKJKEK/"
},
{
"category": "self",
"summary": "SUSE Bug 1188373",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30559 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30561 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30562 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30563 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30564 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30564/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2021-07-21T16:31:37Z",
"generator": {
"date": "2021-07-21T16:31:37Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1073-1",
"initial_release_date": "2021-07-21T16:31:37Z",
"revision_history": [
{
"date": "2021-07-21T16:31:37Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"product": {
"name": "chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"product_id": "chromedriver-91.0.4472.164-lp152.2.113.2.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-91.0.4472.164-lp152.2.113.2.x86_64",
"product": {
"name": "chromium-91.0.4472.164-lp152.2.113.2.x86_64",
"product_id": "chromium-91.0.4472.164-lp152.2.113.2.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2",
"product": {
"name": "openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-91.0.4472.164-lp152.2.113.2.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64"
},
"product_reference": "chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-91.0.4472.164-lp152.2.113.2.x86_64 as component of openSUSE Leap 15.2",
"product_id": "openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
},
"product_reference": "chromium-91.0.4472.164-lp152.2.113.2.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-30541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30541"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30541",
"url": "https://www.suse.com/security/cve/CVE-2021-30541"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30541",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:37Z",
"details": "important"
}
],
"title": "CVE-2021-30541"
},
{
"cve": "CVE-2021-30559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30559"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30559",
"url": "https://www.suse.com/security/cve/CVE-2021-30559"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30559",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:37Z",
"details": "important"
}
],
"title": "CVE-2021-30559"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:37Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-30561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30561"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30561",
"url": "https://www.suse.com/security/cve/CVE-2021-30561"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30561",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:37Z",
"details": "important"
}
],
"title": "CVE-2021-30561"
},
{
"cve": "CVE-2021-30562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30562"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30562",
"url": "https://www.suse.com/security/cve/CVE-2021-30562"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30562",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:37Z",
"details": "important"
}
],
"title": "CVE-2021-30562"
},
{
"cve": "CVE-2021-30563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30563"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30563",
"url": "https://www.suse.com/security/cve/CVE-2021-30563"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30563",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:37Z",
"details": "important"
}
],
"title": "CVE-2021-30563"
},
{
"cve": "CVE-2021-30564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30564"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30564",
"url": "https://www.suse.com/security/cve/CVE-2021-30564"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30564",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2:chromedriver-91.0.4472.164-lp152.2.113.2.x86_64",
"openSUSE Leap 15.2:chromium-91.0.4472.164-lp152.2.113.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:37Z",
"details": "important"
}
],
"title": "CVE-2021-30564"
}
]
}
OPENSUSE-SU-2021:1096-1
Vulnerability from csaf_opensuse - Published: 2021-08-05 10:13 - Updated: 2021-08-05 10:13| URL | Category | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for opera",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for opera fixes the following issues:\n\nUpdate to version 77.0.4054.277:\n\n- DNA-94291 Video conference popout doesnt remember its size after resizing\n- DNA-94399 Incorrect icon for wp.pl in address bar dropdown\n- DNA-94462 Low quality of default wallpaper on windows\n- The update to chromium 91.0.4472.164 fixes following issues:\n CVE-2021-30541, CVE-2021-30560, CVE-2021-30561, CVE-2021-30562,\n CVE-2021-30563, CVE-2021-30564\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1096",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1096-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1096-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UEADDZG3IJDGTQJEBACMOO23GKW2OSHR/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1096-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/UEADDZG3IJDGTQJEBACMOO23GKW2OSHR/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30561 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30562 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30563 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30564 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30564/"
}
],
"title": "Security update for opera",
"tracking": {
"current_release_date": "2021-08-05T10:13:39Z",
"generator": {
"date": "2021-08-05T10:13:39Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1096-1",
"initial_release_date": "2021-08-05T10:13:39Z",
"revision_history": [
{
"date": "2021-08-05T10:13:39Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "opera-77.0.4054.277-lp152.2.55.1.x86_64",
"product": {
"name": "opera-77.0.4054.277-lp152.2.55.1.x86_64",
"product_id": "opera-77.0.4054.277-lp152.2.55.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 15.2 NonFree",
"product": {
"name": "openSUSE Leap 15.2 NonFree",
"product_id": "openSUSE Leap 15.2 NonFree",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.2"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "opera-77.0.4054.277-lp152.2.55.1.x86_64 as component of openSUSE Leap 15.2 NonFree",
"product_id": "openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
},
"product_reference": "opera-77.0.4054.277-lp152.2.55.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.2 NonFree"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-30541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30541"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30541",
"url": "https://www.suse.com/security/cve/CVE-2021-30541"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30541",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-05T10:13:39Z",
"details": "important"
}
],
"title": "CVE-2021-30541"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-05T10:13:39Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-30561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30561"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30561",
"url": "https://www.suse.com/security/cve/CVE-2021-30561"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30561",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-05T10:13:39Z",
"details": "important"
}
],
"title": "CVE-2021-30561"
},
{
"cve": "CVE-2021-30562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30562"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30562",
"url": "https://www.suse.com/security/cve/CVE-2021-30562"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30562",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-05T10:13:39Z",
"details": "important"
}
],
"title": "CVE-2021-30562"
},
{
"cve": "CVE-2021-30563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30563"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30563",
"url": "https://www.suse.com/security/cve/CVE-2021-30563"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30563",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-05T10:13:39Z",
"details": "important"
}
],
"title": "CVE-2021-30563"
},
{
"cve": "CVE-2021-30564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30564"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30564",
"url": "https://www.suse.com/security/cve/CVE-2021-30564"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30564",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 15.2 NonFree:opera-77.0.4054.277-lp152.2.55.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-08-05T10:13:39Z",
"details": "important"
}
],
"title": "CVE-2021-30564"
}
]
}
OPENSUSE-SU-2021:1074-1
Vulnerability from csaf_opensuse - Published: 2021-07-21 16:31 - Updated: 2021-07-21 16:31| URL | Category | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for chromium",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for chromium fixes the following issues:\n\nChromium 91.0.4472.164 (boo#1188373)\n\n* CVE-2021-30559: Out of bounds write in ANGLE\n* CVE-2021-30541: Use after free in V8\n* CVE-2021-30560: Use after free in Blink XSLT\n* CVE-2021-30561: Type Confusion in V8\n* CVE-2021-30562: Use after free in WebSerial\n* CVE-2021-30563: Type Confusion in V8\n* CVE-2021-30564: Heap buffer overflow in WebXR\n* Various fixes from internal audits, fuzzing and other initiatives\n\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-2021-1074",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2021_1074-1.json"
},
{
"category": "self",
"summary": "URL for openSUSE-SU-2021:1074-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MEDHHJT7UKCU4N3Q5EL6PGUNNHXGEIYQ/"
},
{
"category": "self",
"summary": "E-Mail link for openSUSE-SU-2021:1074-1",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/MEDHHJT7UKCU4N3Q5EL6PGUNNHXGEIYQ/"
},
{
"category": "self",
"summary": "SUSE Bug 1188373",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30541 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30559 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30559/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30560 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30560/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30561 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30561/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30562 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30562/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30563 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2021-30564 page",
"url": "https://www.suse.com/security/cve/CVE-2021-30564/"
}
],
"title": "Security update for chromium",
"tracking": {
"current_release_date": "2021-07-21T16:31:48Z",
"generator": {
"date": "2021-07-21T16:31:48Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2021:1074-1",
"initial_release_date": "2021-07-21T16:31:48Z",
"revision_history": [
{
"date": "2021-07-21T16:31:48Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"product": {
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"product_id": "chromedriver-91.0.4472.164-bp153.2.16.1.aarch64"
}
},
{
"category": "product_version",
"name": "chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"product": {
"name": "chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"product_id": "chromium-91.0.4472.164-bp153.2.16.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"product": {
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"product_id": "chromedriver-91.0.4472.164-bp153.2.16.1.x86_64"
}
},
{
"category": "product_version",
"name": "chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"product": {
"name": "chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"product_id": "chromium-91.0.4472.164-bp153.2.16.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Package Hub 15 SP3",
"product": {
"name": "SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3"
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.3",
"product": {
"name": "openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.3"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.aarch64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64"
},
"product_reference": "chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64"
},
"product_reference": "chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-91.0.4472.164-bp153.2.16.1.aarch64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64"
},
"product_reference": "chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-91.0.4472.164-bp153.2.16.1.x86_64 as component of SUSE Package Hub 15 SP3",
"product_id": "SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
},
"product_reference": "chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"relates_to_product_reference": "SUSE Package Hub 15 SP3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64"
},
"product_reference": "chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromedriver-91.0.4472.164-bp153.2.16.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64"
},
"product_reference": "chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-91.0.4472.164-bp153.2.16.1.aarch64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64"
},
"product_reference": "chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "chromium-91.0.4472.164-bp153.2.16.1.x86_64 as component of openSUSE Leap 15.3",
"product_id": "openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
},
"product_reference": "chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2021-30541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30541"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30541",
"url": "https://www.suse.com/security/cve/CVE-2021-30541"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30541",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:48Z",
"details": "important"
}
],
"title": "CVE-2021-30541"
},
{
"cve": "CVE-2021-30559",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30559"
}
],
"notes": [
{
"category": "general",
"text": "Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30559",
"url": "https://www.suse.com/security/cve/CVE-2021-30559"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30559",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:48Z",
"details": "important"
}
],
"title": "CVE-2021-30559"
},
{
"cve": "CVE-2021-30560",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30560"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30560",
"url": "https://www.suse.com/security/cve/CVE-2021-30560"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1188373"
},
{
"category": "external",
"summary": "SUSE Bug 1208574 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1208574"
},
{
"category": "external",
"summary": "SUSE Bug 1211500 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211500"
},
{
"category": "external",
"summary": "SUSE Bug 1211501 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211501"
},
{
"category": "external",
"summary": "SUSE Bug 1211544 for CVE-2021-30560",
"url": "https://bugzilla.suse.com/1211544"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:48Z",
"details": "important"
}
],
"title": "CVE-2021-30560"
},
{
"cve": "CVE-2021-30561",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30561"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30561",
"url": "https://www.suse.com/security/cve/CVE-2021-30561"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30561",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:48Z",
"details": "important"
}
],
"title": "CVE-2021-30561"
},
{
"cve": "CVE-2021-30562",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30562"
}
],
"notes": [
{
"category": "general",
"text": "Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30562",
"url": "https://www.suse.com/security/cve/CVE-2021-30562"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30562",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:48Z",
"details": "important"
}
],
"title": "CVE-2021-30562"
},
{
"cve": "CVE-2021-30563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30563"
}
],
"notes": [
{
"category": "general",
"text": "Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30563",
"url": "https://www.suse.com/security/cve/CVE-2021-30563"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30563",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:48Z",
"details": "important"
}
],
"title": "CVE-2021-30563"
},
{
"cve": "CVE-2021-30564",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2021-30564"
}
],
"notes": [
{
"category": "general",
"text": "Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2021-30564",
"url": "https://www.suse.com/security/cve/CVE-2021-30564"
},
{
"category": "external",
"summary": "SUSE Bug 1188373 for CVE-2021-30564",
"url": "https://bugzilla.suse.com/1188373"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"SUSE Package Hub 15 SP3:chromium-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromedriver-91.0.4472.164-bp153.2.16.1.x86_64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.aarch64",
"openSUSE Leap 15.3:chromium-91.0.4472.164-bp153.2.16.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2021-07-21T16:31:48Z",
"details": "important"
}
],
"title": "CVE-2021-30564"
}
]
}
OPENSUSE-SU-2024:12948-1
Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00| URL | Category | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||