CVE-2021-30605
Last modified
CVE-2021-30605 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.. EPSS estimates a 0.12% chance of exploitation in the next 30 days.
Description
Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Chrome Os Readiness Tool | < 1.0.2.0 |
References
- https://bit.ly/37CS6G9Third Party Advisory
- https://crbug.com/1240952Permissions Required
- https://bit.ly/37CS6G9Third Party Advisory
- https://crbug.com/1240952Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-30605?
How severe is CVE-2021-30605?
How do I fix CVE-2021-30605?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-3060An OS command injection vulnerability in the Simple Certific…8.1
- CVE-2021-30600Use after free in Printing in Google Chrome prior to 92.0.45…8.8
- CVE-2021-30601Use after free in Extensions API in Google Chrome prior to 9…8.8
- CVE-2021-30602Use after free in WebRTC in Google Chrome prior to 92.0.4515…8.8
- CVE-2021-30603Data race in WebAudio in Google Chrome prior to 92.0.4515.15…7.5
- CVE-2021-30604Use after free in ANGLE in Google Chrome prior to 92.0.4515.…8.8
- CVE-2021-30606Chromium: CVE-2021-30606 Use after free in Blink8.8
- CVE-2021-30607Chromium: CVE-2021-30607 Use after free in Permissions8.8
- CVE-2021-30608Chromium: CVE-2021-30608 Use after free in Web Share8.8
- CVE-2021-30609Chromium: CVE-2021-30609 Use after free in Sign-In8.8
- CVE-2021-3061An OS command injection vulnerability in the Palo Alto Netwo…7.2
- CVE-2021-30610Chromium: CVE-2021-30610 Use after free in Extensions API8.8
Are you affected by CVE-2021-30605?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST