CVE-2021-30551VulnerabilityPublished 11/03/2021Updated 10/24/2026
CVE-2021-30551: Google Chromium V8 Type Confusion Vulnerability
Affects Google Chromium V8Source CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 11/03/2021
- KEV deadline
- 11/17/2021
- EPSS
- 64.7% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
CVE-2021-30551 is a type confusion vulnerability in the Google Chromium V8 JavaScript engine that allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple Chromium-based web browsers, including Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild. No explicit patch information is provided in the input data.