Skip to content
9.6 Critical

CVE-2021-30633 Google Chromium Indexed DB API Use-After-Free Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Not observed so far
Weakness CWE-416

Description

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Affected products and versions

Product Affected versions Fixed in
Chrome 93.0 earliest → < 93.0.4577.82 93.0.4577.82
The 6072 CVEs of Chrome →
Track this CVE