First published: Wed Nov 03 2021(Updated: )
Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.
Credit: chrome-cve-admin@google.com Chen Rong chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/chromium | <=90.0.4430.212-1~deb10u1 | 116.0.5845.180-1~deb11u1 118.0.5993.70-1~deb11u1 116.0.5845.180-1~deb12u1 118.0.5993.70-1~deb12u1 118.0.5993.70-1 |
Google Chrome | <96.0.4664.93 | |
Fedoraproject Fedora | =34 | |
Debian Debian Linux | =10.0 | |
Debian Debian Linux | =11.0 | |
Google Chrome | <96.0.4664.93 | 96.0.4664.93 |
<96.0.4664.93 | ||
=34 | ||
=10.0 | ||
=11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-4055 is a heap buffer overflow vulnerability in extensions in Google Chrome.
The severity of CVE-2021-4055 is not specified in the provided information.
An attacker can exploit CVE-2021-4055 by convincing a user to install a malicious extension, which can potentially lead to heap corruption.
Versions prior to 96.0.4664.93 of Google Chrome are affected by CVE-2021-4055.
To fix CVE-2021-4055, users should update their Google Chrome to version 96.0.4664.93 or newer.