Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The remote host is affected by the vulnerability described in GLSA-202107-49 (Chromium, Google Chrome: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in chromium, and       google-chrome. Please review the CVE identifiers referenced below for       details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1096-1 advisory.

  - Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-30541)

  - Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30560)

  - Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially     exploit heap corruption via a crafted HTML page. (CVE-2021-30561, CVE-2021-30563)

  - Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30562)

  - Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to     potentially exploit heap corruption via a crafted HTML page. (CVE-2021-30564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1074-1 advisory.

  - Use after free in V8. (CVE-2021-30541)

  - Out of bounds write in ANGLE. (CVE-2021-30559)

  - Use after free in Blink XSLT. (CVE-2021-30560)

  - Type Confusion in V8. (CVE-2021-30561, CVE-2021-30563)

  - Use after free in WebSerial. (CVE-2021-30562)

  - Heap buffer overflow in WebXR. (CVE-2021-30564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1073-1 advisory.

  - Use after free in V8. (CVE-2021-30541)

  - Out of bounds write in ANGLE. (CVE-2021-30559)

  - Use after free in Blink XSLT. (CVE-2021-30560)

  - Type Confusion in V8. (CVE-2021-30561, CVE-2021-30563)

  - Use after free in WebSerial. (CVE-2021-30562)

  - Heap buffer overflow in WebXR. (CVE-2021-30564)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.71. It is, therefore, affected by multiple vulnerabilities as referenced in the July 19, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Chrome Releases reports :

This release contains 8 security fixes, including :

- [1219082] High CVE-2021-30559: Out of bounds write in ANGLE.
Reported by Seong-Hwan Park (SeHwa) of SecunologyLab on 2021-06-11

- [1214842] High CVE-2021-30541: Use after free in V8. Reported by Richard Wheeldon on 2021-05-31

- [1219209] High CVE-2021-30560: Use after free in Blink XSLT.
Reported by Nick Wellnhofer on 2021-06-12

- [1219630] High CVE-2021-30561: Type Confusion in V8. Reported by Sergei Glazunov of Google Project Zero on 2021-06-14

- [1220078] High CVE-2021-30562: Use after free in WebSerial. Reported by Anonymous on 2021-06-15

- [1228407] High CVE-2021-30563: Type Confusion in V8. Reported by Anonymous on 2021-07-12

- [1221309] Medium CVE-2021-30564: Heap buffer overflow in WebXR.
Reported by Ali Merchant, iQ3Connect VR Platform on 2021-06-17

Google is aware of reports that an exploit for CVE-2021-30563 exists in the wild.

The version of Google Chrome installed on the remote macOS host is prior to 91.0.4472.164. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_07_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 91.0.4472.164. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021_07_stable-channel-update-for-desktop advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
157039	GLSA-202107-49 : Chromium, Google Chrome: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
152262	openSUSE 15 Security Update : opera (openSUSE-SU-2021:1096-1)	Nessus	SuSE Local Security Checks	high
151937	openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1074-1)	Nessus	SuSE Local Security Checks	high
151936	openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1073-1)	Nessus	SuSE Local Security Checks	high
151810	Microsoft Edge (Chromium) < 91.0.864.71 Multiple Vulnerabilities	Nessus	Windows	high
151809	FreeBSD : chromium -- multiple vulnerabilities (1ba21ff1-e672-11eb-a686-3065ec8fd3ec)	Nessus	FreeBSD Local Security Checks	high
151673	Google Chrome < 91.0.4472.164 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
151672	Google Chrome < 91.0.4472.164 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2021-30562

high

Tenable Plugins

high

high

high

high

high

high

high

high