Vulnerability Spotlight: Heap buffer overflow condition in Google Chrome could lead to code execution

Summary: Marcin Towalski of Cisco Talos discovered a heap-based buffer overflow vulnerability in Google Chrome's WebRTC component, tracked as TALOS-2021-1372 (CVE-2021-37979), which triggers when a user opens a specially crafted web page and can cause memory corruption leading to code execution. Talos confirmed Chrome versions 92.0.4515.159 (Stable) and 95.0.4623.0 (Canary) could be exploited, worked with Google on a fix, and published Snort rules 58108 and 58109 to detect exploitation attempts.
Bottom line: The exploit path is a single crafted web page opened in a browser, and Talos confirmed working exploitation against named Chrome builds before the update landed - so any endpoint still on those versions carries the risk until patched.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-37979
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026