Technical Severity
CRITICAL
CVSS v3.1 Metrics
9.6
/ 10
Minimal Risk
Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitation Likelihood
EPSS Prediction
12.63
%
Predictive Probability
Percentile Rank
93.8
th
Documented as more likely to be exploited than 93.8% of known CVEs.
Detection Date
Nov 03, 2021
Remediation Due
Nov 17, 2021
CISA Catalog Active
Threat Analysis
Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.
Remediation Directive
Apply updates per vendor instructions.