Vulnerability Spotlight: Code execution vulnerability in Google Web Audio API

Summary: Cisco Talos discovered two use-after-free vulnerabilities in Google Chrome's implementation of the Web Audio API, a JavaScript API for processing and synthesizing audio in web applications. The first, TALOS-2021-1251/CVE-2021-30522, exists in the blink::AudioNodeOutput::Pull functionality and affects 64-bit Chrome versions 88.0.4324.146 and 90.0.4405.0, where a specially crafted web page can trigger the condition and an attacker can exploit it by tricking a user into opening that page.
What you should know: Exploitation requires only that a user open a crafted web page in an affected Chrome build, so the attack surface is the browser itself rather than anything a user installs. Talos published Snort rules 55036 and 55037 to detect exploitation attempts.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-30522
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026