Vulnerability Details : CVE-2021-30632
Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Vulnerability category: Memory Corruption
CVE-2021-30632 is in the CISA Known Exploited Vulnerabilities Catalog
CISA vulnerability name:Google Chromium V8 Out-of-Bounds Write Vulnerability
CISA required action:Apply updates per vendor instructions.
CISA description:Google Chromium V8 Engine contains an out-of-bounds write vulnerability which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.
Added on 2021-11-03 Action due date 2021-11-17
Exploit prediction scoring system (EPSS) score for CVE-2021-30632
Probability of exploitation activity in the next 30 days: 63.03%
CVSS scores for CVE-2021-30632
|Base Score||Base Severity||CVSS Vector||Exploitability Score||Impact Score||Source|
CWE ids for CVE-2021-30632
The product writes data past the end, or before the beginning, of the intended buffer.Assigned by: [email protected] (Primary)
References for CVE-2021-30632
Mailing List;Third Party Advisory
Permissions Required;Vendor Advisory
Release Notes;Vendor Advisory
Third Party Advisory
Products affected by CVE-2021-30632