Apache\ CVEs and Security Vulnerabilities

CVE-2021-30617

Chromium: CVE-2021-30617 Policy bypass in Blink

CVSS 3.1 · 6.5 Medium EPSS 3.7% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30616

Chromium: CVE-2021-30616 Use after free in Media

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation

CVSS 3.1 · 6.5 Medium EPSS 5.6% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30614

Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip

CVSS 3.1 · 8.8 High EPSS 4.5% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30613

Chromium: CVE-2021-30613 Use after free in Base internals

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30612

Chromium: CVE-2021-30612 Use after free in WebRTC

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30611

Chromium: CVE-2021-30611 Use after free in WebRTC

CVSS 3.1 · 8.8 High EPSS 2.8% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30610

Chromium: CVE-2021-30610 Use after free in Extensions API

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30608

Chromium: CVE-2021-30608 Use after free in Web Share

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30607

Chromium: CVE-2021-30607 Use after free in Permissions

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30606

Chromium: CVE-2021-30606 Use after free in Blink

CVSS 3.1 · 8.8 High EPSS 4.1% KEV · Not listed

Vendors

Fedoraproject Microsoft

Products

Fedora Edge Edge Chromium

CVE-2021-30605

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Google Microsoft

Products

Chrome Os Readiness Tool Windows 10 Windows 7 and 1 more

CVE-2021-30604

Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed

Vendors

Fedoraproject Google

Products

Fedora Chrome

CVE-2021-30603

Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 7.5 High EPSS 3.9% KEV · Not listed

Vendors

Fedoraproject Google

Products

Fedora Chrome

CVE-2021-30602

Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.1% KEV · Not listed

Vendors

Fedoraproject Google

Products

Fedora Chrome

CVE-2021-30601

Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 1.9% KEV · Not listed

Vendors

Fedoraproject Google

Products

Fedora Chrome

CVE-2021-30600

Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 2.5% KEV · Not listed

Vendors

Fedoraproject Google

Products

Fedora Chrome

CVE-2021-30599

Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 5.4% KEV · Not listed

Vendors

Fedoraproject Google

Products

Fedora Chrome

CVE-2021-30598

Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.1 · 8.8 High EPSS 7.0% KEV · Not listed

Vendors

Fedoraproject Google

Products

Fedora Chrome

Search vulnerabilities