CVE-2021-30605

Published: Sep 8, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

Affected (1)

Products: Google: Chrome Os Readiness Tool

Google

1 product

Chrome Os Readiness Tool

Configuration A

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Google Chrome Os Readiness Tool	Before 1.0.2.0

Running on/with	Platform Versions
Microsoft Windows 10	All versions
Microsoft Windows 7	All versions
Microsoft Windows 8.1	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

https://bit.ly/37CS6G9

Source: chrome-cve-admin@google.com

Third Party Advisory

https://crbug.com/1240952

Source: chrome-cve-admin@google.com

Permissions Required

https://bit.ly/37CS6G9

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://crbug.com/1240952

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.