Lucene search

[email protected]CVE-2021-21200

HistoryJan 02, 2023 - 11:15 p.m.

CVE-2021-21200

2023-01-0223:15:10

CWE-125

[email protected]

web.nvd.nist.gov

cve-2021-21200

out of bounds read

google chrome

webui settings

html page

remote attacker

security vulnerability

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

5.1 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

45.6%

JSON

Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chrome security severity: Low)

CPENameOperatorVersion
google:chromegoogle chromelt89.0.4389.72
google:chromegoogle chromeeq34.0.1847.36
google:chromegoogle chromeeq8.0.552.325
google:chromegoogle chromeeq69.0.3475.0
google:chromegoogle chromeeq79.0.3927.0
google:chromegoogle chromeeq20.0.1132.47
google:chromegoogle chromeeq34.0.1847.7
google:chromegoogle chromeeq70.0.3538.7
google:chromegoogle chromeeq14.0.835.163
google:chromegoogle chromeeq6.0.472.30

CPE	Name	Operator	Version
google:chrome	google chrome	lt	89.0.4389.72
google:chrome	google chrome	eq	34.0.1847.36
google:chrome	google chrome	eq	8.0.552.325
google:chrome	google chrome	eq	69.0.3475.0
google:chrome	google chrome	eq	79.0.3927.0
google:chrome	google chrome	eq	20.0.1132.47
google:chrome	google chrome	eq	34.0.1847.7
google:chrome	google chrome	eq	70.0.3538.7
google:chrome	google chrome	eq	14.0.835.163
google:chrome	google chrome	eq	6.0.472.30

Rows per page:

1-10 of 56461

References

chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html

crbug.com/1164816

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

5.1 Medium

AI Score

Confidence

High

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

45.6%

JSON

Related for CVE-2021-21200

ubuntucve1 debiancve1 prion1 veracode1 chrome1 openvas1 osv1