Google has released an update for Chrome 91.0.4472.101 that fixes 14 vulnerabilities, including the CVE-2021-30551 issue, which is already being exploited by attackers in zero-day exploits. Specific details have not been disclosed, but it is known that the vulnerability is due to type confusion in the JavaScript V8 engine.
The new version also addresses another critical vulnerability, CVE-2021-30544, caused by a use-after-free memory access in the Back-forward cache (BFCache), which is used for instant transitions when navigating with the back and forward buttons or through previously viewed pages on the current site. This issue has been assigned a critical severity level, meaning it allows bypassing all levels of browser protection and is sufficient to execute code on the system outside of the sandbox environment.
Source: opennet.ru
