Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2021-30554
HistoryJul 02, 2021 - 12:00 a.m.

CVE-2021-30554

2021-07-0200:00:00
ubuntu.com
ubuntu.com
25
vulnerability
google chrome
remote attack
heap corruption
html page
debian
ubuntu
snap
webgl

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.018

Percentile

88.4%

JSON

Use after free in WebGL in Google Chrome prior to 91.0.4472.114 allowed a
remote attacker to potentially exploit heap corruption via a crafted HTML
page.

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchchromium-browser< 92.0.4515.159-0ubuntu0.18.04.1UNKNOWN

Related

prion 1
mscve 1
cve 1
cisa 1
cvelist 1
cisa_kev 1
nvd 1
alpinelinux 1
debiancve 1
attackerkb 1
thn 7
archlinux 4
nessus 8
kaspersky 3
openvas 8
freebsd 1
chrome 1
suse 5
malwarebytes 1
threatpost 2
securelist 1
gentoo 1
fedora 3
googleprojectzero 1
qualysblog 2
osv 2
prion
prion
Design/Logic Flaw
2021-07-02 19:15:00
mscve
mscve
Chromium: CVE-2021-30554 Use after free in WebGL
2021-06-18 16:21:57
cve
cve
CVE-2021-30554
2021-07-02 19:15:07
cisa
cisa
Google Releases Security Updates for Chrome
2021-06-18 00:00:00
cvelist
cvelist
CVE-2021-30554
2021-07-02 18:45:15
cisa_kev
cisa_kev
Google Chromium WebGL Use-After-Free Vulnerability
2021-11-03 00:00:00
nvd
nvd
CVE-2021-30554
2021-07-02 19:15:07
alpinelinux
alpinelinux
CVE-2021-30554
2021-07-02 19:15:07
debiancve
debiancve
CVE-2021-30554
2021-07-02 19:15:07
attackerkb
attackerkb
CVE-2021-30554
2021-07-02 00:00:00
thn
thn
Update‌ ‌Your Chrome Browser to Patch Yet Another 0-Day Exploit‌ed ‌in‌-the‌-Wild
2021-06-18 03:16:00
Update Your Chrome Browser to Patch New Zero‑Day Bug Exploited in the Wild
2021-07-16 05:08:00
Update Google Chrome to Patch 2 New Zero-Day Flaws Under Attack
2021-09-14 04:08:00
archlinux
archlinux
[ASA-202107-1] electron12: arbitrary code execution
2021-07-01 00:00:00
[ASA-202107-4] opera: arbitrary code execution
2021-07-01 00:00:00
[ASA-202106-47] vivaldi: arbitrary code execution
2021-06-22 00:00:00
nessus
nessus
openSUSE 15 Security Update : chromium (openSUSE-SU-2021:0898-1)
2021-06-28 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (afdc7579-d023-11eb-bcad-3065ec8fd3ec)
2021-06-25 00:00:00
Microsoft Edge (Chromium) < 91.0.864.54 Multiple Vulnerabilities
2021-06-18 00:00:00
kaspersky
kaspersky
KLA12215 Multiple vulnerabilities in Opera
2021-04-12 00:00:00
KLA12211 Multiple vulnerabilities in Microsoft Browser
2021-06-18 00:00:00
KLA12210 Multiple vulnerabilities in Google Chrome
2021-06-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0898-1)
2021-06-22 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_17-2021-06) - Linux
2022-12-07 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_17-2021-06) - Mac OS X
2022-12-07 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2021-06-17 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2021-06-17 00:00:00
suse
suse
Security update for chromium (important)
2021-06-21 00:00:00
Security update for chromium (important)
2021-06-28 00:00:00
Security update for opera (important)
2021-07-01 00:00:00
malwarebytes
malwarebytes
Update now! Google Chrome fixes two in-the-wild zero-days
2021-09-14 16:28:47
threatpost
threatpost
Pair of Google Chrome Zero-Day Bugs Actively Exploited
2021-09-14 15:03:41
Chrome Zero-Day Under Active Attack: Patch ASAP
2022-02-15 18:33:28
securelist
securelist
IT threat evolution in Q2 2021. PC statistics
2021-08-12 10:00:12
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2021-07-06 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: chromium-91.0.4472.114-1.fc34
2021-07-09 01:03:32
[SECURITY] Fedora 33 Update: chromium-91.0.4472.114-2.fc33
2021-07-18 01:04:26
[SECURITY] Fedora 34 Update: qt5-qtwebengine-5.15.8-2.fc34
2022-02-04 01:23:18
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
qualysblog
qualysblog
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
osv
osv
chromedriver-93.0.4577.82-1.1 on GA media
2024-06-15 00:00:00
ungoogled-chromium-113.0.5672.92-1.1 on GA media
2024-06-15 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.018

Percentile

88.4%

JSON
Related for UB:CVE-2021-30554
prion1mscve1cve1cisa1cvelist1cisa_kev1nvd1alpinelinux1debiancve1attackerkb1thn7archlinux4nessus8kaspersky3openvas8freebsd1chrome1suse5malwarebytes1threatpost2securelist1gentoo1fedora3googleprojectzero1qualysblog2osv2