chromereleases.googleblog.com
https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop.html CVE-2021-37980
HIGH
Record summary
CVE-2021-37980 has a selected CVSS score of 7.4 (high); EIP currently links 1 repository PoC.
Description
Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows.
Description source: CVE List
Exploitation context
Available material
- Repository PoCs
- 1
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
ChromeBrowse Google / Chrome | CVE List | Before 94.0.4606.81 | affected |
Proofs of concept
1Repository PoCs
GitHubZeusBox/CVE-2021-37980Repository PoCby ZeusBoxStars: 70Not analyzed1 file
References
6crbug.com
https://crbug.com/1254631 FEDORA-2021-5093f11905Vendor advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNARCF5HEZK7GJXZRN5TQ45AQDCRM2WO lists.fedoraproject.org
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RNARCF5HEZK7GJXZRN5TQ45AQDCRM2WO nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-37980 DSA-5046Vendor advisory
https://www.debian.org/security/2022/dsa-5046