Skip to main content
CVE-2021-30551VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2021-30551: Google Chromium V8 Type Confusion Vulnerability

Affects Google Chromium V8Source CISA KEV

Severity
High

No CVSS score published yet

Exploitation

Actively exploited – in CISA KEV since 11/03/2021

KEV deadline
11/17/2021
EPSS
64.7% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

Description

CVE-2021-30551 is a type confusion vulnerability in the Google Chromium V8 JavaScript engine that allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple Chromium-based web browsers, including Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild. No explicit patch information is provided in the input data.

Weaknesses

References

Track Google Chromium V8 with alerts and the API. See plans

Added 10/24/2026 · analysed 10/24/2026 · updated 10/24/2026