CVE-2021-30605

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
GoogleChrome>= unspecified, < 1.0.2.0

References

Timeline

Published
Sep 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-306068.8Chromium: CVE-2021-30606 Use after free in BlinkCVE-2021-306078.8Chromium: CVE-2021-30607 Use after free in PermissionsCVE-2021-306088.8Chromium: CVE-2021-30608 Use after free in Web ShareCVE-2021-306098.8Chromium: CVE-2021-30609 Use after free in Sign-InCVE-2021-30617.2An OS command injection vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables an authenticated administrator wCVE-2021-306108.8Chromium: CVE-2021-30610 Use after free in Extensions APICVE-2021-306118.8Chromium: CVE-2021-30611 Use after free in WebRTCCVE-2021-306128.8Chromium: CVE-2021-30612 Use after free in WebRTCCVE-2021-306138.8Chromium: CVE-2021-30613 Use after free in Base internalsCVE-2021-306148.8Chromium: CVE-2021-30614 Heap buffer overflow in TabStripCVE-2021-306156.5Chromium: CVE-2021-30615 Cross-origin data leak in NavigationCVE-2021-306168.8Chromium: CVE-2021-30616 Use after free in Media
CVE-2021-30605: High severity, CVSS 7.8 | Vulnix