CVE-2021-30632 PoC — Google Chrome 缓冲区错误漏洞

Source

https://github.com/CrackerCat/CVE-2021-30632

Associated Vulnerability

Title: Google Chrome 缓冲区错误漏洞 (CVE-2021-30632)
Description:Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Readme

# CVE-2021-30632 Chrome V8 RCE Exploit for Windows

### Tested Version : Chrome 91, 92, 93.0.4577.63

### Demo
![Demo](demo.gif)

### [reference]
* Chrome in-the-wild bug analysis: CVE-2021-30632 https://securitylab.github.com/research/in_the_wild_chrome_cve_2021_30632/
* JS POC sample https://github.com/github/securitylab/blob/main/SecurityExploits/Chrome/v8/CVE-2021-30623/poc.js

#### Thanks to Github Security Lab and Man Yue Mo

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →