NVD disclosure day
CVE-2021-37976
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A vulnerability in Google Chrome's memory handling could allow attackers to access sensitive information from process memory via a crafted webpage. This impacts organizations using affected Chrome versions and exposes them to potential data breaches. Prompt application of vendor updates is recommended.
CVE-2021-37975
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Google Chrome's V8 engine could allow remote attackers to corrupt memory via a crafted HTML page. This may lead to system compromise and data loss. Organizations using affected versions should update their software promptly.
CVE-2021-37973
Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.
A memory management flaw in Google Chrome's Portals feature could allow a remote attacker to escape the browser's sandbox. This may result in unauthorized system access or data compromise. Affected organizations face business risk if employees interact with malicious web pages.
CVE-2021-30633
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A vulnerability in Google Chrome's Indexed DB API could allow an attacker with renderer process control to escape the browser sandbox via a crafted HTML page. This impacts organizations using affected Chrome versions by posing a risk of unauthorized system access and data compromise. Organizations should update Chrome
CVE-2021-30632
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A Google Chrome V8 engine vulnerability allows attackers to corrupt memory via crafted web pages, potentially leading to code execution and system compromise. This impacts organizations, employees, and data.