← back
CVE-2021-30633

CVE-2021-30633

CVSS 9.6 CRITICALEPSS 32.7%● KEVCWE-416
In short

A memory safety flaw in Chrome's Indexed DB feature allows attackers who control the browser's renderer process to escape the security sandbox by using a specially crafted webpage. This could lead to complete system compromise.

Technical detail

Use-after-free vulnerability in Indexed DB API allows an attacker with renderer process compromise to trigger unsafe memory access and bypass sandbox isolation. Exploitation requires delivering a malicious HTML page to an already-compromised renderer context, enabling potential privilege escalation to host system.

Summary generated and translated by AI from the official description.
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Google · Chrome

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →