Lucene search
Veracode Vulnerability DatabaseVERACODE:29323HistoryFeb 10, 2021 - 5:23 a.m.
Arbitrary Code Execution
2021-02-1005:23:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
24
0.016 Low
EPSS
Percentile
87.6%
chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in V8 allows a remote attacker to execute arbitrary code on the host OS via a heap corruption via a malicious HTML page.
References
packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html
chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html
crbug.com/1170176
lists.fedoraproject.org/archives/list/[email protected]/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/
lists.fedoraproject.org/archives/list/[email protected]/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/
security-tracker.debian.org/tracker/CVE-2021-21148
security.gentoo.org/glsa/202104-08
www.debian.org/security/2021/dsa-4858
Related
freebsd
freebsd
chromium -- heap buffer overflow in V8
2021-02-04 00:00:00
suse
suse
Security update for chromium (important)
2021-02-11 00:00:00
Security update for opera (important)
2021-02-15 00:00:00
Security update for chromium (important)
2021-02-09 00:00:00
kaspersky
kaspersky
KLA12062 DoS vulnerability in Google Chrome
2021-02-04 00:00:00
KLA12179 DoS vulnerability in Opera
2021-02-09 00:00:00
KLA12063 DoS vulnerability in Microsoft Browser
2021-02-05 00:00:00
debiancve
debiancve
CVE-2021-21148
2021-02-09 16:15:12
nessus
nessus
Google Chrome < 88.0.4324.150 Vulnerability
2021-02-04 00:00:00
Google Chrome < 88.0.4324.150 Vulnerability
2021-02-04 00:00:00
openSUSE Security Update : chromium (openSUSE-2021-267)
2021-02-10 00:00:00
cisa_kev
cisa_kev
Google Chromium V8 Heap Buffer Overflow Vulnerability
2021-11-03 00:00:00
osv
osv
CVE-2021-21148
2021-02-09 16:15:12
chromium - security update
2021-02-19 00:00:00
openvas
openvas
malwarebytes
malwarebytes
Update now! Chrome patches zero-day that was exploited in the wild
2021-02-05 12:14:04
Update now! Google Chrome fixes two in-the-wild zero-days
2021-09-14 16:28:47
cve
cve
CVE-2021-21148
2021-02-09 16:15:12
prion
prion
Heap overflow
2021-02-09 16:15:00
attackerkb
attackerkb
CVE-2021-21148
2021-02-09 00:00:00
CVE-2021-21193
2021-03-16 00:00:00
cvelist
cvelist
CVE-2021-21148
2021-02-09 15:30:14
mscve
mscve
Chromium CVE-2021-21148: Heap buffer overflow in V8
2021-02-05 08:00:00
ubuntucve
ubuntucve
CVE-2021-21148
2021-02-09 00:00:00
alpinelinux
alpinelinux
CVE-2021-21148
2021-02-09 16:15:12
nvd
nvd
CVE-2021-21148
2021-02-09 16:15:12
chrome
chrome
Stable Channel Update for Desktop
2021-02-04 00:00:00
threatpost
threatpost
Google Chrome Zero-Day Afflicts Windows, Mac Users
2021-02-05 15:47:55
Google Chrome Bug Actively Exploited as Zero-Day
2022-03-30 16:14:30
Pair of Google Chrome Zero-Day Bugs Actively Exploited
2021-09-14 15:03:41
thn
thn
New Chrome 0-day Bug Under Active Attacks – Update Your Browser ASAP!
2021-03-03 06:03:00
New Chrome Browser 0-day Under Active Attack—Update Immediately!
2021-02-05 07:40:00
Another Google Chrome 0-Day Bug Found Actively Exploited In-the-Wild
2021-03-13 03:16:00
krebs
krebs
Microsoft Patch Tuesday, February 2021 Edition
2021-02-09 22:37:19
archlinux
archlinux
[ASA-202102-6] chromium: multiple issues
2021-02-06 00:00:00
[ASA-202102-4] vivaldi: multiple issues
2021-02-06 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: chromium-88.0.4324.150-1.fc32
2021-02-17 05:09:44
[SECURITY] Fedora 33 Update: chromium-88.0.4324.150-1.fc33
2021-02-10 01:20:58
debian
debian
[SECURITY] [DSA 4858-1] chromium security update
2021-02-20 02:29:52
securelist
securelist
IT threat evolution Q1 2021. Non-mobile statistics
2021-05-31 10:00:05
mageia
mageia
Updated qtwebengine5 packages fix security vulnerabilities
2021-08-15 11:38:04
rapid7blog
rapid7blog
Patch Tuesday - February 2021
2021-02-09 23:51:27
googleprojectzero
googleprojectzero
The More You Know, The More You Know You Don’t Know
2022-04-19 00:00:00
qualysblog
qualysblog
Qualys Response to CISA Alert: Binding Operational Directive 22-01
2021-11-09 06:15:01
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2021-04-30 00:00:00