VULNERABILITY INTELLIGENCE

CVE-2021-30605

CVSS score7.8 HIGH

EPSS probability0.12%

CISA KEVNot currently listed

Published2021-09-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

Weakness classification

nvd@nist.gov: CWE-287

Primary references

chrome-cve-admin@google.com — Third Party Advisory
chrome-cve-admin@google.com — Permissions Required
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required