CVE-2021-30571

CRITICAL

Google Chrome <92.0.4515.107 - Privilege Escalation

Title source: llm

Description

Insufficient policy enforcement in DevTools in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted HTML page.

References (5)

Core 5

Core References

Vendor Advisory x_refsource_misc

https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html

Exploit, Issue Tracking, Patch, Permissions Required, Third Party Advisory x_refsource_misc

https://crbug.com/1101897

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/

Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/

Scores

CVSS v3 9.6

EPSS 0.0023

EPSS Percentile 45.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Details

CWE

CWE-863

Status published

Products (4)

fedoraproject/fedora 33

fedoraproject/fedora 34

fedoraproject/fedora 35

google/chrome < 92.0.4515.107

Published Aug 03, 2021

Tracked Since Feb 18, 2026