Kaspersky ID:
KLA12154
Дата обнаружения:
26/04/2021
Обновлено:
25/01/2024

Описание

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

  1. A data validation vulnerability in V8 can be exploited to bypass security restrictions.
  2. A policy enforcement vulnerability in extensions component can be exploited to bypass security restrictions.
  3. A use after free vulnerability in Dev Tools can be exploited to cause denial of service or execute arbitrary code.
  4. A type confusion vulnerability in V8 can be exploited to cause denial of service.
  5. A heap buffer overflow vulnerability in ANGLE can be exploited to cause denial of service.
  6. A security UI vulnerability in downloads component can be exploited to spoof user interface.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2021-21227
    critical
  • CVE-2021-21228
    warning
  • CVE-2021-21232
    critical
  • CVE-2021-21230
    critical
  • CVE-2021-21233
    critical
  • CVE-2021-21231
    critical
  • CVE-2021-21229
    high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.