Vulnerability Spotlight: Use-after-free vulnerability in Google Chrome could lead to code execution

Summary: Cisco Talos discovered TALOS-2021-1348 (CVE-2021-30602), a use-after-free vulnerability in Chrome's WebRTC functionality that a specially crafted web page can trigger to reuse freed memory and potentially achieve arbitrary code execution. Talos confirmed that Chrome versions 91.0.4472.114 (Stable) and 93.0.4575.0 (Canary) could be exploited, and worked with Google to resolve the issue and release an update.
Why it matters: Exploitation requires only that a user open a malicious website, so the exposure is one click away for anyone running the confirmed-vulnerable Chrome builds until they update.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-30602
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026