Lucene search

K
hiveproHive ProHIVEPRO:E94A0D5F817307E8C9D45F52D6A000D1
HistoryOct 31, 2021 - 10:11 a.m.

For the third month in a row, it’s time to update Google Chrome

2021-10-3110:11:09
Hive Pro
www.hivepro.com
32

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

THREAT LEVEL: Red.

For a detailed advisory, download the pdf file here.

Multiple vulnerabilities have been discovered in the world's most popular browser. Two of them have been used in the wild (CVE-2021-38000, CVE-2021-38003). Google has recently patched these vulnerabilities in Google Chrome version 95.0.4638.69 for Windows, Mac, and Linux.

Vulnerability Details

Patch Link

<https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_28.html&gt;

References

<https://www.zdnet.com/article/google-fixes-two-high-severity-zero-day-flaws-in-chrome/&gt;

<https://thedigitalhacker.com/chrome-95-update-patches-expose-zero-day-flaws-flaws-revealed-at-tianfu-cup/&gt;

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P