CVE-2021-38007

Description

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Base Score

8.8

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.409

Vulnerability	OS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (96.0.4664.45)	Windows
Multiple vulnerabilities fixed in Google Chrome (96.0.4664.45)	Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (96.0.1054.29)	Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (96.0.1054.29)	Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac 96.0.4664.45	Mac
Multiple vulnerabilities Affected in Chrome for Centos 96.0.4664.44	Linux
Multiple vulnerabilities Affected in Chrome for Debian 96.0.4664.44	Linux
Multiple vulnerabilities Affected in Chrome for Redhat 96.0.4664.44	Linux
Multiple vulnerabilities Affected in Chrome for Suse 96.0.4664.44	Linux
Multiple vulnerabilities Affected in Chrome for Ubuntu 96.0.4664.44	Linux
chromium security update(DSA-5046-1) chromium_97.0.4692.71-0.1~deb11u1_amd64.deb	Linux

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-322428	Google Chrome (x64) (96.0.4664.45)
PATCH-322427	Google Chrome (96.0.4664.45)
PATCH-109333	Microsoft Edge for chromium business (99.0.1150.30) (x86)
PATCH-109332	Microsoft Edge for chromium business (99.0.1150.30) (x64)
PATCH-609673	Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)