CVE-2021-30573 PoC — Microsoft Edge 资源管理错误漏洞

Source

https://github.com/s4e-io/CVE-2021-30573-PoC-Google-Chrome

Associated Vulnerability

Title:Microsoft Edge 资源管理错误漏洞 (CVE-2021-30573)
Description:Use after free in GPU in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Description

Google Chrome Use After Free vulnerability reported by S4E Team

Readme

# CVE-2021-30573-PoC-Google-Chrome
Google Chrome Use After Free vulnerability reported by S4E Team

**Total Bug Bounty Reward: $6.000**

This is Proof of Concept for:

* **[Google Security_Severity]** CVE
* **[HIGH] CVE-2021-30573** https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30573

Google Blog post:

https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop_20.html


Requirements: Nothing, you just need to run an HTML file in an older version of Google Chrome [91.0.4472.77] + [stable] (Official Build) (64-bit)

    poc-exploit.html (The bug works in Google Chrome 91 or lower. It is patched in 92+)

Mentioned bug is "Reported by Security For Everyone Team"

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!