Rewterz Threat Alert – Dridex Banking Malware – Active IOCs
May 26, 2021Rewterz Threat Advisory – CVE-2021-20492 – IBM WebSphere Application Server XML external entity injection
May 27, 2021Rewterz Threat Alert – Dridex Banking Malware – Active IOCs
May 26, 2021Rewterz Threat Advisory – CVE-2021-20492 – IBM WebSphere Application Server XML external entity injection
May 27, 2021Severity
Medium
Analysis Summary
CVE-2021-30539
Google Chrome could allow a remote attacker to bypass security restrictions, caused by insufficient policy enforcement in content security policy. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.
CVE-2021-30538
Google Chrome could allow a remote attacker to bypass security restrictions, caused by insufficient policy enforcement in content security policy. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.
CVE-2021-30537
Google Chrome could allow a remote attacker to bypass security restrictions, caused by insufficient policy enforcement in cookies. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.
CVE-2021-30536
Google Chrome could allow a remote attacker to obtain sensitive information, caused by an out-of-bounds read in V8. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to obtain sensitive information.
CVE-2021-30534
Google Chrome could allow a remote attacker to bypass security restrictions, caused by insufficient policy enforcement in iFrameSandbox. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to bypass security restrictions.
Impact
- Bypass Security
- Information disclosure
Affected Vendors
Affected Products
Google Chrome 91
Remediation
Upgrade to the latest version of Chome (91.0.4472.77 or later).