CVE-2021-30547

Description

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.527

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (91.0.4472.101)Windows
Multiple vulnerabilities fixed in Google Chrome (91.0.4472.101)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (91.0.864.48)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (91.0.864.48)Windows
Vulnerabilities CVE-2021-29970,CVE-2021-30547,CVE-2021-29976 are fixed in Mozilla Firefox ESR (78.12.0)Windows
Vulnerabilities CVE-2021-29970,CVE-2021-30547,CVE-2021-29976 are fixed in Mozilla Firefox ESR (x64) (78.12.0)Windows
Multiple vulnerabilities fixed in Mozilla Firefox (90.0)Windows
Multiple vulnerabilities fixed in Mozilla Firefox (x64) (90.0)Windows
Vulnerabilities CVE-2021-29969,CVE-2021-29970,CVE-2021-30547,CVE-2021-29976 are fixed in Mozilla Thunderbird (x64) (78.12.0)Windows
Vulnerabilities CVE-2021-29969,CVE-2021-29970,CVE-2021-30547,CVE-2021-29976 are fixed in Mozilla Thunderbird (78.12.0)Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 96.99Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 96.99Windows
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (90.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (90.0.2)Mac
Vulnerabilities CVE-2021-29969,CVE-2021-29970,CVE-2021-30547,CVE-2021-29976 are fixed in Mozilla Thunderbird For Mac (78.12.0)Mac
Multiple vulnerabilities are fixed in Google Chrome For Mac 91.0.4472.101Mac
Vulnerabilities CVE-2021-29970,CVE-2021-30547,CVE-2021-29976 are fixed in Mozilla Firefox ESR for MAC 78.12.0Mac
firefox-esr security update(DSA-4939-1) firefox-esr_78.12.0esr-1~deb10u1_i386.debLinux
firefox-esr security update(DSA-4939-1) firefox-esr_78.12.0esr-1~deb10u1_amd64.debLinux
(RHSA-2021:2741) firefox security update firefox-78.12.0-1.el7_9.i686.rpmLinux
(RHSA-2021:2741) firefox security update firefox-78.12.0-1.el7_9.x86_64.rpmLinux
SUSE-SU-2021:2389-1(SUSE Linux Enterprise Server 12-SP5 ) MozillaFirefox-78.12.0-112.65.1.x86_64.rpmLinux
SUSE-SU-2021:2389-1(SUSE Linux Enterprise Server 12-SP5 ) MozillaFirefox-debuginfo-78.12.0-112.65.1.x86_64.rpmLinux
SUSE-SU-2021:2389-1(SUSE Linux Enterprise Server 12-SP5 ) MozillaFirefox-debugsource-78.12.0-112.65.1.x86_64.rpmLinux
SUSE-SU-2021:2389-1(SUSE Linux Enterprise Server 12-SP5 ) MozillaFirefox-devel-78.12.0-112.65.1.x86_64.rpmLinux
SUSE-SU-2021:2389-1(SUSE Linux Enterprise Server 12-SP5 ) MozillaFirefox-translations-common-78.12.0-112.65.1.x86_64.rpmLinux
thunderbird security update(DSA-4940-1) thunderbird_78.12.0-1~deb10u1_i386.debLinux
thunderbird security update(DSA-4940-1) thunderbird_78.12.0-1~deb10u1_amd64.debLinux
Firefox update (ELSA-2021-2743) firefox-78.12.0-1.0.1.el8_4.x86_64.rpmLinux
(RHSA-2021:2743) firefox security update firefox-78.12.0-1.el8_4.x86_64.rpmLinux
(RHSA-2021:2743) firefox security update firefox-debugsource-78.12.0-1.el8_4.x86_64.rpmLinux
(RHSA-2021:2881) thunderbird security update thunderbird-78.12.0-2.el7_9.x86_64.rpmLinux
Thunderbird update (ELSA-2021-2881) thunderbird-78.12.0-2.0.1.el7_9.x86_64.rpmLinux
(RHSA-2021:2883) thunderbird security update thunderbird-78.12.0-3.el8_4.x86_64.rpmLinux
(RHSA-2021:2883) thunderbird security update thunderbird-debugsource-78.12.0-3.el8_4.x86_64.rpmLinux
Thunderbird update (ELSA-2021-2883) thunderbird-78.12.0-3.0.1.el8_4.x86_64.rpmLinux
Mozilla Open Source mail and newsgroup client (USN-5058-1) thunderbird_78.13.0+build1-0ubuntu0.18.04.1_i386.debLinux
Mozilla Open Source mail and newsgroup client (USN-5058-1) thunderbird_78.13.0+build1-0ubuntu0.18.04.1_amd64.debLinux
Mozilla Open Source mail and newsgroup client (USN-5058-1) thunderbird_78.13.0+build1-0ubuntu0.20.04.2_amd64.debLinux
Mozilla Open Source mail and newsgroup client (USN-5058-1) thunderbird_78.13.0+build1-0ubuntu0.21.04.2_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-320004Google Chrome (x64) (91.0.4472.101)
PATCH-320003Google Chrome (91.0.4472.101)
PATCH-109332Microsoft Edge for chromium business (99.0.1150.30) (x64)
PATCH-109333Microsoft Edge for chromium business (99.0.1150.30) (x86)
PATCH-320504Mozilla Firefox ESR (78.12.0)
PATCH-320505Mozilla Firefox ESR (x64) (78.12.0)
PATCH-320502Mozilla Firefox (90.0)
PATCH-320503Mozilla Firefox (x64) (90.0)
PATCH-320518Mozilla Thunderbird (x64) (78.12.0)
PATCH-320517Mozilla Thunderbird (78.12.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-607000Mozilla Firefox For Mac (124.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)
PATCH-607001Mozilla Firefox ESR for MAC 115.9.0

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234