Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-202107-49
HistoryJul 22, 2021 - 12:00 a.m.

Chromium, Google Chrome: Multiple vulnerabilities

2021-07-2200:00:00
Gentoo Foundation
security.gentoo.org
57
chromium
google chrome
vulnerabilities
upgrade

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.039

Percentile

92.0%

JSON

Background

Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web.

Google Chrome is one fast, simple, and secure browser for all your devices.

Description

Multiple vulnerabilities have been discovered in chromium, and google-chrome. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Chromium users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=www-client/chromium-91.0.4472.164"

All Google Chrome users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=www-client/google-chrome-91.0.4472.164"
OSVersionArchitecturePackageVersionFilename
Gentooanyallwww-client/chromium< 91.0.4472.164UNKNOWN
Gentooanyallwww-client/google-chrome< 91.0.4472.164UNKNOWN

Related

fedora 3
nessus 36
archlinux 3
kaspersky 3
openvas 29
suse 5
chrome 1
freebsd 1
cnvd 7
cvelist 7
cve 7
nvd 7
alpinelinux 7
mscve 7
prion 7
ubuntucve 7
debiancve 7
attackerkb 1
redhatcve 1
packetstorm 1
cisa_kev 1
checkpoint_advisories 1
cisa 1
cbl_mariner 2
gentoo 1
mageia 1
osv 12
veracode 1
debian 2
photon 6
slackware 1
github 3
rubygems 1
ubuntu 2
cloudfoundry 1
thn 6
threatpost 3
malwarebytes 1
avleonov 1
securelist 1
ibm 1
googleprojectzero 1
qualysblog 1
tenable 1
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-91.0.4472.164-1.fc33
2021-07-26 01:02:49
[SECURITY] Fedora 34 Update: chromium-91.0.4472.164-1.fc34
2021-07-19 01:13:48
[SECURITY] Fedora 34 Update: qt5-qtwebengine-5.15.8-2.fc34
2022-02-04 01:23:18
nessus
nessus
Google Chrome < 91.0.4472.164 Multiple Vulnerabilities
2021-07-15 00:00:00
openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1074-1)
2021-07-22 00:00:00
openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1073-1)
2021-07-22 00:00:00
archlinux
archlinux
[ASA-202107-30] chromium: arbitrary code execution
2021-07-16 00:00:00
[ASA-202107-31] vivaldi: arbitrary code execution
2021-07-16 00:00:00
[ASA-202107-46] opera: arbitrary code execution
2021-07-21 00:00:00
kaspersky
kaspersky
KLA12234 Multiple vulnerabilities in Google Chrome
2021-07-15 00:00:00
KLA12235 Multiple vulnerabilities in Microsoft Browser
2021-07-19 00:00:00
KLA12240 Multiple vulnerabilities in Opera
2021-07-21 00:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2021-9f62d36f09)
2021-07-27 00:00:00
openSUSE: Security Advisory for chromium (openSUSE-SU-2021:1073-1)
2021-07-22 00:00:00
Fedora: Security Advisory for chromium (FEDORA-2021-30c84b4924)
2021-07-27 00:00:00
suse
suse
Security update for chromium (important)
2021-07-22 00:00:00
Security update for chromium (important)
2021-07-22 00:00:00
Security update for opera (important)
2021-08-05 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2021-07-15 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2021-07-15 00:00:00
cnvd
cnvd
Google Chrome WebSerial use-after-release vulnerability
2021-07-20 00:00:00
Google Chrome out-of-bounds write vulnerability (CNVD-2021-62173)
2021-07-19 00:00:00
Google Chrome Type Obfuscation Vulnerability (CNVD-2021-62171)
2021-07-19 00:00:00
cvelist
cvelist
CVE-2021-30559
2021-08-03 18:25:20
CVE-2021-30562
2021-08-03 18:25:25
CVE-2021-30561
2021-08-03 18:25:23
cve
cve
CVE-2021-30559
2021-08-03 19:15:08
CVE-2021-30561
2021-08-03 19:15:08
CVE-2021-30564
2021-08-03 19:15:08
nvd
nvd
CVE-2021-30564
2021-08-03 19:15:08
CVE-2021-30559
2021-08-03 19:15:08
CVE-2021-30563
2021-08-03 19:15:08
alpinelinux
alpinelinux
CVE-2021-30562
2021-08-03 19:15:08
CVE-2021-30561
2021-08-03 19:15:08
CVE-2021-30559
2021-08-03 19:15:08
mscve
mscve
Chromium: CVE-2021-30562 Use after free in WebSerial
2021-07-19 07:00:00
Chromium: CVE-2021-30559 Out of bounds write in ANGLE
2021-07-19 07:00:00
Chromium: CVE-2021-30564 Heap buffer overflow in WebXR
2021-07-19 07:00:00
prion
prion
Design/Logic Flaw
2021-08-03 19:15:00
Design/Logic Flaw
2021-08-03 19:15:00
Type confusion
2021-08-03 19:15:00
ubuntucve
ubuntucve
CVE-2021-30562
2021-08-03 00:00:00
CVE-2021-30561
2021-08-03 00:00:00
CVE-2021-30564
2021-08-03 00:00:00
debiancve
debiancve
CVE-2021-30561
2021-08-03 19:15:08
CVE-2021-30562
2021-08-03 19:15:08
CVE-2021-30559
2021-08-03 19:15:08
attackerkb
attackerkb
CVE-2021-30563
2021-08-03 00:00:00
redhatcve
redhatcve
CVE-2021-30563
2022-05-20 23:23:53
packetstorm
packetstorm
Chrome JS WasmJs::InstallConditionalFeatures Object Corruption
2021-08-16 00:00:00
cisa_kev
cisa_kev
Google Chromium V8 Type Confusion Vulnerability
2021-11-03 00:00:00
checkpoint_advisories
checkpoint_advisories
Google Chrome Browser V8 Remote Code Execution (CVE-2021-30563)
2022-01-17 00:00:00
cisa
cisa
Google Releases Security Updates for Chrome
2021-07-16 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-30560 affecting package libxslt for versions less than 1.1.34-7
2022-06-03 17:54:00
CVE-2021-30560 affecting package libxslt 1.1.34-2
2022-06-15 17:03:07
gentoo
gentoo
libxslt: Multiple Vulnerabilities
2023-10-31 00:00:00
mageia
mageia
Updated libxslt packages fix security vulnerability
2022-09-21 21:15:27
osv
osv
libexslt0-1.1.37-1.1 on GA media
2024-06-15 00:00:00
libxslt - security update
2022-08-24 00:00:00
CVE-2021-30560
2021-08-03 19:15:08
veracode
veracode
Arbitrary Code Execution
2021-07-16 17:48:19
debian
debian
[SECURITY] [DSA 5216-1] libxslt security update
2022-08-24 15:04:29
[SECURITY] [DLA 3101-1] libxslt security update
2022-09-09 13:08:41
photon
photon
Important Photon OS Security Update - PHSA-2022-0398
2022-05-30 00:00:00
Important Photon OS Security Update - PHSA-2022-0485
2022-06-17 00:00:00
Important Photon OS Security Update - PHSA-2022-3.0-0398
2022-05-30 00:00:00
slackware
slackware
[slackware-security] libxslt
2022-03-01 05:14:54
github
github
Nokogiri has vulnerable dependencies on libxml2 and libxslt
2022-05-24 19:09:47
Vulnerable dependencies in Nokogiri
2022-02-25 20:32:09
Attack of the clones: Getting RCE in Chrome’s renderer with duplicate object properties
2024-06-26 16:00:53
rubygems
rubygems
Update packaged libxml2 (2.9.12 → 2.9.13) and libxslt (1.1.34 → 1.1.35)
2022-02-20 21:00:00
ubuntu
ubuntu
Libxslt vulnerabilities
2022-08-22 00:00:00
Libxslt vulnerabilities
2022-08-22 00:00:00
cloudfoundry
cloudfoundry
USN-5575-1: Libxslt vulnerabilities | Cloud Foundry
2022-09-29 00:00:00
thn
thn
Update Your Chrome Browser to Patch New Zero‑Day Bug Exploited in the Wild
2021-07-16 05:08:00
Update Google Chrome to Patch 2 New Zero-Day Flaws Under Attack
2021-09-14 04:08:00
Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability
2021-09-25 06:39:00
threatpost
threatpost
Google Chrome Bug Actively Exploited as Zero-Day
2022-03-30 16:14:30
Pair of Google Chrome Zero-Day Bugs Actively Exploited
2021-09-14 15:03:41
Chrome Zero-Day Under Active Attack: Patch ASAP
2022-02-15 18:33:28
malwarebytes
malwarebytes
Update now! Google Chrome fixes two in-the-wild zero-days
2021-09-14 16:28:47
avleonov
avleonov
Last Week’s Security news: Exploits for ForgeRock, vSphere, Apache Tomcat, new Print Spooler vuln, Kaseya Patch and REvil, SolarWinds, Schneider Electric, Bulletins
2021-07-19 16:29:00
securelist
securelist
IT threat evolution in Q3 2021. PC statistics
2021-11-26 12:00:36
ibm
ibm
Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version
2023-11-13 15:22:22
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
qualysblog
qualysblog
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.039

Percentile

92.0%

JSON
Related for GLSA-202107-49
fedora3nessus36archlinux3kaspersky3openvas29suse5chrome1freebsd1cnvd7cvelist7cve7nvd7alpinelinux7mscve7prion7ubuntucve7debiancve7attackerkb1redhatcve1packetstorm1cisa_kev1checkpoint_advisories1cisa1cbl_mariner2gentoo1mageia1osv12veracode1debian2photon6slackware1github3rubygems1ubuntu2cloudfoundry1thn6threatpost3malwarebytes1avleonov1securelist1ibm1googleprojectzero1qualysblog1tenable1