CRITICAL CISA KEV

CVE-2021-30633

CVSS v3

9.6

CRITICAL

EPSS Score

38.2%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CISA Known Exploited Vulnerability

Date Added
11/3/2021
Patch Due Date
11/17/2021
Ransomware Use
Unknown

Technical details

Published
10/8/2021

Frequently asked questions

What is CVE-2021-30633?

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Is CVE-2021-30633 actively exploited?

Yes. CVE-2021-30633 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 11/17/2021.

What is the CVSS score for CVE-2021-30633?

CVE-2021-30633 has a CVSS v3 base score of 9.6 (CRITICAL severity).

Is CVE-2021-30633 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.