CVE-2021-30549: Use after free in Spell check
Published May 23, 2021
·Updated
Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
Credit
David Erceg
Affected Software
4 affected componentsFixes available
Google Chrome<91.0.4472.101
91.0.4472.101
Google Chrome<91.0.4472.101
fedoraproject fedora=33
fedoraproject fedora=34
Event History
May 23, 2021
CVE Published
12:00 AM
Jun 15, 2021
CVE Published
via MITRE·09:40 PM
Data Sourced
via MITRE·09:40 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2021-30549?
CVE-2021-30549 has a high severity rating due to the potential for heap corruption and exploitation via malicious extensions.
2
How do I fix CVE-2021-30549?
To fix CVE-2021-30549, update Google Chrome to version 91.0.4472.101 or later.
3
Which versions of Google Chrome are affected by CVE-2021-30549?
Google Chrome versions prior to 91.0.4472.101 are affected by CVE-2021-30549.
4
Can CVE-2021-30549 be exploited through malicious extensions?
Yes, CVE-2021-30549 can be exploited if a user installs a malicious extension designed to trigger the vulnerability.
5
What operating systems are impacted by CVE-2021-30549?
CVE-2021-30549 impacts Google Chrome on various operating systems including Fedora 33 and 34.