Lucene search

K
nvd[email protected]NVD:CVE-2021-21200
HistoryJan 02, 2023 - 11:15 p.m.

CVE-2021-21200

2023-01-0223:15:10
CWE-125
web.nvd.nist.gov
7
google chrome
webui settings
out of bounds read
remote attacker
html page
low severity

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

AI Score

5

Confidence

High

EPSS

0.001

Percentile

47.3%

Out of bounds read in WebUI Settings in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chrome security severity: Low)

Affected configurations

Nvd
Node
googlechromeRange<89.0.4389.72
VendorProductVersionCPE
googlechrome*cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

AI Score

5

Confidence

High

EPSS

0.001

Percentile

47.3%