CVE-2021-30560

🗓️ 03 Aug 2021 00:00:00Reported by ChromeType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 400 Views

Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Reporter	Title	Published	Views	Family All 188
FreeBSD	chromium -- multiple vulnerabilities	15 Jul 202100:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties Affecting Watson Machine Learning Accelerator on Cloud Pak for Data version	13 Nov 202315:22	–	ibm
AlpineLinux	CVE-2021-30560	3 Aug 202100:00	–	alpinelinux
ArchLinux	[ASA-202107-30] chromium: arbitrary code execution	16 Jul 202100:00	–	archlinux
ArchLinux	[ASA-202107-31] vivaldi: arbitrary code execution	16 Jul 202100:00	–	archlinux
ArchLinux	[ASA-202107-46] opera: arbitrary code execution	21 Jul 202100:00	–	archlinux
AstraLinux	Astra Linux - уязвимость в chromium, libxslt	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the XSLT (Extensible Stylesheet Language Transformations) implementation of Google Chrome’s Blink rendering module allows a attacker to trigger a service failure.	6 Aug 202100:00	–	bdu_fstec
CBLMariner	CVE-2021-30560 affecting package libxslt for versions less than 1.1.34-7	3 Jun 202217:54	–	cbl_mariner
CBLMariner	CVE-2021-30560 affecting package libxslt 1.1.34-2	15 Jun 202217:03	–	cbl_mariner

NVD

Vulners

Node

google chromeRange<91.0.4472.164

Node

xmlsoft libxsltRange<1.1.35

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

Node

splunk universal_forwarderRange8.2.0–8.2.12

splunk universal_forwarderRange9.0.0–9.0.6

splunk universal_forwarderMatch9.1.0

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "91.0.4472.164",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
chromereleases	www.chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
crbug	www.crbug.com/1219209
debian	www.debian.org/security/2022/dsa-5216
lists	www.lists.debian.org/debian-lts-announce/2022/09/msg00010.html
security	www.security.gentoo.org/glsa/202310-23

17 Jun 2026 03:50Current

9High risk

Vulners AI Score9

CVSS 26.8

CVSS 3.18.8

EPSS0.21623

CWE-416