March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Nanocore Rat – Active IOCs
June 10, 2021
Rewterz Threat Advisory – Multiple McAfee Windows Vulnerabilities
June 10, 2021
Rewterz Threat Alert – Nanocore Rat – Active IOCs
June 10, 2021
Rewterz Threat Advisory – Multiple McAfee Windows Vulnerabilities
June 10, 2021
Severity
High
Analysis Summary
CVE-2021-30545
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Extensions. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30546
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Autofill. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30547
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write in ANGLE. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30548
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Loader. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30549
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Spell check. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30550
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Accessibility. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30551
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a type confusion in V8. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30552
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Extensions. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
CVE-2021-30553
Google Chrome could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free in Network service. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.
Impact
- Unauthorized Access
- Code Execution
Affected Vendors
Affected Products
- Google Chrome 91
Remediation
Upgrade to the latest version of Chrome (91.0.4472.101 or later), available from the Google Chrome Web site.