Microsoft Edge (Chromium-based)
CVE-2021-30573 — Chromium: CVE-2021-30573 Use after free in GPU
CVSS 8.8
2021-07 archive
Executive Summary
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Overview
8.8
CVSS HIGH
Unknown
MS Severity
Not Exploited
MS Exploit Status
N/A
MS Exploit Likelihood
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
Required
SCOPE
Unchanged
EPSS Score
No EPSS score available for this CVE.
View on FIRST.orgAffected Products
1 affected product
| Product | KB Article | Severity | Impact | Restart Required |
|---|---|---|---|---|
| Microsoft Edge (Chromium-based) | Release Notes (Security Update) |
No |
Patches
1 patch
| Article | Type | Restart |
|---|---|---|
Release Notes |
Security Update | No |
Exploits & PoC
3 public PoCsUnverified third-party code
Public proof-of-concept repositories aggregated from PoC-in-GitHub. They are not reviewed and may be incomplete, non-functional, or malicious — inspect the code before running anything.
| Repository | Stars | Published | Description |
|---|---|---|---|
| s4eio/CVE-2021-30573-PoC-Google-Chrome | 14 | 2021-07-29 | Google Chrome Use After Free vulnerability reported by S4E Team |
| orangmuda/CVE-2021-30573 | 10 | 2021-10-25 | Google Chrome Vulnerabilities CVE-2021-30573 |
| kh4sh3i/CVE-2021-30573 | 2 | 2021-10-26 | Google Chrome Vulnerabilities CVE-2021-30573 allowed a remote attacker to potentially exploit heap corruption |
Detection Rules
No public Sigma or Nuclei detection rule has been mapped to this CVE yet. Coverage is concentrated on exploited / high-profile vulnerabilities; check SigmaHQ for updates.
Acknowledgments
Microsoft has not published researcher acknowledgments for this CVE, or they are not yet reflected in our data source. Check the MSRC advisory directly for the most current credit information.
References
On This Page