Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html | Release Notes |
https://crbug.com/1251727 | Issue Tracking Patch Vendor Advisory |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ | Release Notes |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ | Release Notes |
https://www.debian.org/security/2022/dsa-5046 | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
26 Jul 2024, 19:39
Type | Values Removed | Values Added |
---|---|---|
References | () https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html - Release Notes | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - Release Notes | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - Release Notes | |
References | () https://www.debian.org/security/2022/dsa-5046 - Mailing List, Third Party Advisory |
07 Nov 2023, 03:37
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-10-08 22:15
Updated : 2024-07-26 19:39
NVD link : CVE-2021-37973
Mitre link : CVE-2021-37973
CVE.ORG link : CVE-2021-37973
JSON object : View
Products Affected
fedoraproject
- fedora
- chrome
debian
- debian_linux
CWE
CWE-416
Use After Free