CVE-2021-30551

HIGH KEV

Google Chrome <91.0.4472.101 - Heap Corruption

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-30551 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit from researchers including xmzyshypnc.

AI-analyzed exploit summary The repository contains only a README with minimal setup instructions and a reference link, but no actual exploit code or technical details. It lacks functional PoC code or in-depth analysis.

Description

Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Exploits (1)

nomisec STUB 24 stars
by xmzyshypnc · client-side
https://github.com/xmzyshypnc/CVE-2021-30551

The repository contains only a README with minimal setup instructions and a reference link, but no actual exploit code or technical details. It lacks functional PoC code or in-depth analysis.

Classification
Stub 90%
Attack Type
Other
Complexity
Theoretical
Reliability
Theoretical
Target: Chrome V8 (unspecified version)
No auth needed
Prerequisites: Chrome browser with vulnerable V8 engine
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (7)

Core 7
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://crbug.com/1216437
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202107-06
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/202208-25

Scores

CVSS v3 8.8
EPSS 0.6470
EPSS Percentile 99.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation active
Automatable no
Technical Impact total

Details

CISA KEV 2021-11-03
VulnCheck KEV 2021-06-03
InTheWild.io 2021-06-03
ENISA EUVD EUVD-2021-17472
CWE
CWE-843
Status published
Products (3)
fedoraproject/fedora 33
fedoraproject/fedora 34
google/chrome < 91.0.4472.101
Published Jun 15, 2021
KEV Added Nov 03, 2021
Tracked Since Feb 18, 2026