IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
6.5Mittel KEV

CVE-2021-30533Google Chromium PopupBlocker Security Bypass Vulnerability

Google Chrome Veröffentlicht: (vor 5 Jahren)

Bekannt ausgenutzt — Google Chromium PopupBlocker Security Bypass Vulnerability

CISA hat am 27.06.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 18.07.2022.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2021-30533

Beschreibung

Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted iframe.

Schwachstellentyp (CWE): CWE-863

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
fedoraproject fedora 33
Google Chrome unspecified – < 91.0.4472.77

Referenzen und Patches

CPE-Treffer (NVD) (3)
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 91.0.4472.77
  • cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — Google Chrome

8.8Hoch
CVE-2026-119270
Google Chrome

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119271
Google Chrome

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3Mittel
CVE-2026-119272
Google Chrome

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6Kritisch
CVE-2026-119263
Google Chrome

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119264
Google Chrome

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119265
Google Chrome

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)