CVE-2021-30593 
                        Detail
                     
                    
                    
                        
                            
                                
                                    Modified This CVE record has been updated after NVD enrichment efforts were completed. Enrichment data supplied by the NVD may require amendment due to these changes.
                                 
                             
                            Description  
                            
                            Out of bounds read in Tab Strip in Google Chrome prior to 92.0.4515.131 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.
                            
                            
                            
                            
                                Metrics 
                                 
                                
                                    CVSS Version 4.0
                                     
                                    CVSS Version 3.x
                                     
                                    CVSS Version 2.0
                                     
                                
                                
                                    
                                        
                                            NVD enrichment efforts reference publicly available information to associate
                                            vector strings. CVSS information contributed by other sources is also
                                            displayed.
                                         
                                     
                                
                                
                                
                                    CVSS 4.0 Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
                                       
                                             NVD assessment
                                       not yet provided.   
                                     
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 3.x Severity and Vector Strings: 
                                    
                                    
                                        
                                        
                                        
                                        
												Vector:  
													CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                                
                                
                                    CVSS 2.0 Severity and Vector Strings:   
                                    
                                    
                                        
                                        
                                        
												Vector:  
													(AV:N/AC:M/Au:N/C:P/I:N/A:P) 
                                     
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                    
                                 
                             
                            
                                
                                
                                
                                
                                    References to Advisories, Solutions, and Tools 
                                    
                                        By selecting these links, you will be leaving NIST webspace.
                                        We have provided these links to other web sites because they
                                        may have information that would be of interest to you. No
                                        inferences should be drawn on account of other sites being
                                        referenced, or not, from this page. There may be other web
                                        sites that are more appropriate for your purpose. NIST does
                                        not necessarily endorse the views expressed, or concur with
                                        the facts presented on these sites. Further, NIST does not
                                        endorse any commercial products that may be mentioned on
                                        these sites. Please address comments about this page to [email protected] 
                                    
                                 
                                
                                
                                    Weakness Enumeration 
                                    
                                        
                                        
                                            CWE-ID 
                                            CWE Name 
                                            Source 
                                         
                                         
                                        
                                        
                                            
                                                CWE-125 
                                                
                                             
                                            Out-of-bounds Read 
                                            
														
														NIST   
														 
                                             
                                         
                                         
                                    
                                 
                                
                                
                                    Change History 
                                     9 change records found show changes 
                                     
                                    
	
		
			 
			
				CVE Modified by CVE  11/21/2024 1:04:15 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://crbug.com/1209616 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Chrome  5/14/2024 4:57:08 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
				 
			
		 
	
		
			 
			
				CVE Modified by Chrome  11/06/2023 10:33:12 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								Chrome https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ [No types assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								Chrome https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ [No types assigned] 
								  
					 
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								Chrome https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ [No types assigned] 
								  
					 
					
						Removed 
						Reference 
						
							
							
							
								Chrome https://lists.fedoraproject.org/archives/list/[email protected] /message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ 
								  
							
						
								
								
						 
					 
					
						Removed 
						Reference 
						
							
							
							
								Chrome https://lists.fedoraproject.org/archives/list/[email protected] /message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ 
								  
							
						
								
								
						 
					 
					
						Removed 
						Reference 
						
							
							
							
								Chrome https://lists.fedoraproject.org/archives/list/[email protected] /message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ 
								  
							
						
								
								
						 
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  11/30/2021 4:15:28 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Changed 
						CPE Configuration 
						
							
							
							
								OR
     *cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* 
								  
							
						
							
								OR
     *cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://crbug.com/1209616 Permissions Required, Vendor Advisory 
								  
							
						
							
								https://crbug.com/1209616 Exploit, Issue Tracking, Patch, Permissions Required, Vendor Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ No Types Assigned 
								  
							
						
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ Mailing List, Third Party Advisory 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Chrome  9/24/2021 7:15:11 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/IPJPUSAWIJMQFBQQQYXAICLI4EKFQOH6/ [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				Modified Analysis by NIST  9/16/2021 8:35:49 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								OR
     *cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ No Types Assigned 
								  
							
						
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ Mailing List, Third Party Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ No Types Assigned 
								  
							
						
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ Mailing List, Third Party Advisory 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Chrome  9/13/2021 11:15:15 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/QW4R2K5HVJ4R6XDZYOJCCFPIN2XHNS3L/ [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				CVE Modified by Chrome  9/13/2021 2:15:13 AM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						Reference 
						
							
							
								
								
							
							
						 
							
						
							
								https://lists.fedoraproject.org/archives/list/[email protected] /message/5LVY4WIWTVVYKQMROJJS365TZBKEARCF/ [No Types Assigned] 
								  
					 
				 
			
		 
	
		
			 
			
				Initial Analysis by NIST  8/27/2021 2:14:58 PM  
			
				 
					
						Action 
						Type 
						Old Value 
						New Value 
					 
				 
				
					
						Added 
						CVSS V3.1 
						
							
							
								
								
							
							
						 
							
						
							
								NIST AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 
								  
					 
					
						Added 
						CVSS V2 
						
							
							
								
								
							
							
						 
							
						
							
								NIST (AV:N/AC:M/Au:N/C:P/I:N/A:P) 
								  
					 
					
						Added 
						CWE 
						
							
							
								
								
							
							
						 
							
						
							
								NIST CWE-125 
								  
					 
					
						Added 
						CPE Configuration 
						
							
							
								
								
							
							
						 
							
						
							
								OR
     *cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* versions up to (excluding) 92.0.4515.131 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html No Types Assigned 
								  
							
						
							
								https://chromereleases.googleblog.com/2021/08/the-stable-channel-has-been-updated-to.html Release Notes, Vendor Advisory 
								  
					 
					
						Changed 
						Reference Type 
						
							
							
							
								https://crbug.com/1209616 No Types Assigned 
								  
							
						
							
								https://crbug.com/1209616 Permissions Required, Vendor Advisory 
								  
					 
					
						Added 
						CVSS V2 Metadata 
						
							
							
								
								
							
							
						 
							
						
							
								Victim must voluntarily interact with attack mechanism 
								  
					 
				 
			
		  
	 
                                 
                             
                         
                        
                            
                                Quick Info 
                                CVE Dictionary Entry:  CVE-2021-30593  NVD
                                Published Date:  08/26/2021  NVD
                                Last Modified:  11/21/2024  
                                Source:  Chrome