CVE-2021-4324

Summary

CVE-2021-4324 is a medium severity vulnerability affecting Google Chrome versions prior to 90.0.4430.93. This issue involves insufficient policy enforcement in Google Update, enabling a remote attacker to read arbitrary files through a maliciously crafted file. The vulnerability arises from the failure to adequately restrict access to sensitive data, potentially leading to confidential information disclosure. Google has since released a patch to address this issue, mitigating the risk for affected users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.