CVE-2021-4058

Description

Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
2.423

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (96.0.4664.93)Windows
Multiple vulnerabilities fixed in Google Chrome (96.0.4664.93)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (x64) (96.0.1054.53)Windows
Multiple vulnerabilities fixed in Microsoft Edge for chromium business (96.0.1054.53)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac 96.0.4664.93Mac
chromium security update(DSA-5046-1) chromium_97.0.4692.71-0.1~deb11u1_amd64.debLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-322711Google Chrome (x64) (96.0.4664.93)
PATCH-322710Google Chrome (96.0.4664.93)
PATCH-109332Microsoft Edge for chromium business (99.0.1150.30) (x64)
PATCH-109333Microsoft Edge for chromium business (99.0.1150.30) (x86)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234