VYPR
← All advisories
High severity7.8NVD Advisory· Published Sep 8, 2021· Updated Jun 17, 2026

CVE-2021-30605

CVE-2021-30605

Description

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

Affected products

3
  • Google/Chromev5
    Range: unspecified
  • Google/ChromeOS Readiness Tool2 versions
    cpe:2.3:a:google:chrome_os_readiness_tool:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:google:chrome_os_readiness_tool:*:*:*:*:*:*:*:*range: <1.0.2.0
    • (no CPE)range: <1.0.2.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.