CVE-2021-30605

2021-09-0820:35:16

Chrome

www.cve.org

cve-2021-30605

chromeos

readiness tool

windows

dcom access rights

discretionary access controls

AI Score

7.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

CNA Affected

[
  {
    "product": "Chrome",
    "vendor": "Google",
    "versions": [
      {
        "lessThan": "1.0.2.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

bit.ly/37CS6G9

crbug.com/1240952