Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2021-37975

Published: 08/10/2021 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Google

Vulnerability Summary

Use after free in V8 in Google Chrome before 94.0.4606.71 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

fedoraproject fedora 33

fedoraproject fedora 34

fedoraproject fedora 35

debian debian linux 10.0

debian debian linux 11.0

Vendor Advisories

Debian Security Advisories: DSA-5046-1 chromium -- security update
Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure For the oldstable distribution (buster), security support for Chromium has been discontinued due to toolchain issues which no longer allow to build current Chromium releases on buster You can eit ...
Arch Linux Issues:
A use after free security issue has been found in the V8 component of the Chromium browser engine before version 940460671 Google is aware that an exploit for this issue exists in the wild ...
Google Chrome: Stable Channel Update for Desktop
The Stable channel has been updated to 940460671 for Windows, Mac and Linux which will roll out over the coming days/weeks Extended stable channel has also been updated to 940460671 for Windows and Mac which will roll out over the coming days/weeksA full list of changes in this build is available in the log Interested in switching release c ...

Recent Articles

Lawsuit claims hospital ransomware infection cost baby her life
The Register • Iain Thomson in San Francisco • 04 Oct 2021

Get our weekly newsletter Plus Russia arrests security boss, two Chrome flaws exploited

In Brief A hospital that continued to admit patients during a ransomware attack has been sued over claims that a baby died after doctors and nurses failed to spot there was a problem due to networks being shut down. Nicko Silar died after six months in intensive care after being born at Springhill Memorial Hospital with the umbilical cord wrapped around her neck, documents filed in the Alabama Circuit Court state [PDF]. The suit alleges that, because the hospital had shut down key networks, staf...

Read more...

References

CWE-416https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.htmlhttps://crbug.com/1252918https://www.debian.org/security/2022/dsa-5046http://packetstormsecurity.com/files/172847/Chrome-V8-Logic-Bug-Use-After-Free.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D63JZ3ROXCUHP4CFWDHCPZNTGET7T34R/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRFXUDH46PFVE75VQVWY6PYY5DK3S2XT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNARCF5HEZK7GJXZRN5TQ45AQDCRM2WO/https://nvd.nist.govhttps://www.debian.org/security/2022/dsa-5046
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook