Security News > 2021 > June > Google Patches Chrome Zero-Day Used by Commercial Exploit Company
Google this week released patches for 14 vulnerabilities in the Chrome browser, including a security flaw that has been exploited in the wild.
"Google is aware that an exploit for CVE-2021-30551 exists in the wild," the company said, without providing further technical details.
On Twitter, Shane Huntley, director of Google's Threat Analysis Group, revealed that the exploit for CVE-2021-30551 has been created by a "Commercial exploit company providing capability for limited nation state Eastern Europe / Middle East targeting."
The same organization has developed an exploit for CVE-2021-33742, a critical remote code execution issue in the Windows MSHTML platform, Huntley explains.
Microsoft this week released patches for this flaw and five other actively exploited security vulnerabilities in its products.
Since the beginning of 2021, Google addressed a total of six zero-day vulnerabilities in Chrome.
News URL
Related news
- Lazarus hackers used fake DeFi game to exploit Google Chrome zero-day (source)
- Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices (source)
- Google Adds New Pixel Security Features to Block 2G Exploits and Baseband Attacks (source)
- North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware (source)
- Google: 70% of exploited flaws disclosed in 2023 were zero-days (source)
- Hackers exploit 52 zero-days on the first day of Pwn2Own Ireland (source)
- Google to let businesses create curated Chrome Web Stores for extensions (source)
- How to enable Safe Browsing in Google Chrome on Android (source)
- New tool bypasses Google Chrome’s new cookie encryption system (source)
- Google’s AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine (source)
Related Vulnerability
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-06-15 | CVE-2021-30551 | Type Confusion vulnerability in multiple products Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 8.8 |
| 2021-06-08 | CVE-2021-33742 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft products Windows MSHTML Platform Remote Code Execution Vulnerability | 0.0 |