CVE-2021-4319: Use after free in Blink

Q: What is CVE-2021-4319?

CVE-2021-4319 is a vulnerability that allows a remote attacker to perform arbitrary read/write operations in Google Chrome versions prior to 93.0.4577.82.

Q: What is the severity of CVE-2021-4319?

The severity of CVE-2021-4319 is High with a severity score of 8.8.

Q: How does CVE-2021-4319 work?

CVE-2021-4319 is a use after free vulnerability in Blink in Google Chrome, which allows a remote attacker to exploit a memory corruption issue and manipulate the browser's memory to perform arbitrary read/write operations.

Q: Which software versions are affected by CVE-2021-4319?

Google Chrome versions prior to 93.0.4577.82 are affected by CVE-2021-4319.

Q: How can I fix CVE-2021-4319?

To fix CVE-2021-4319, update your Google Chrome browser to version 93.0.4577.82 or later.

Published May 28, 2021

Updated

Use after free in Blink in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Credit

Weipeng Jiang@@Krace(360 Vulnerability Research Institute), Guang Gong(360 Vulnerability Research Institute)

Affected Software

2 affected componentsFixes available

Google Chrome<93.0.4577.82

93.0.4577.82

Google Chrome<93.0.4577.82

Event History

May 28, 2021

CVE Published

12:00 AM

Jul 28, 2023

CVE Published

via MITRE·11:26 PM

Data Sourced

via MITRE·11:26 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

2705646769654617144

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2021-4319?

CVE-2021-4319 is a vulnerability that allows a remote attacker to perform arbitrary read/write operations in Google Chrome versions prior to 93.0.4577.82.

What is the severity of CVE-2021-4319?

The severity of CVE-2021-4319 is High with a severity score of 8.8.

How does CVE-2021-4319 work?