Page generated: 09 Nov 2026, 09:51 UTC
← Dashboard

CVE-2021-30633

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 9.6 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.6/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.6: +1.44
  • Fresh EPSS: 33.18%: +0.17

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 11 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

The Hacker News
Press · 29 Oct 2021, 07:00 · Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs - The Hacker News
The Record from Recorded Future News
Press · 28 Oct 2021, 07:00 · Google fixes 15th and 16th Chrome zero-day this year - The Record from Recorded Future News
The GitHub Blog
Press · 27 Sep 2021, 07:00 · Chrome in-the-wild bug analysis: CVE-2021-30632 - The GitHub Blog
The Hacker News
Press · 25 Sep 2021, 07:00 · Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability - The Hacker News
NewsBytes
Press · 15 Sep 2021, 07:00 · Google fixes 11 Chrome browser bugs, including two zero-day vulnerabilities - NewsBytes
See all 11 source documents
gHacks
Press · 14 Sep 2021, 07:00 · Update Google Chrome to patch Two Zero-Day vulnerabilities that are exploited in the wild - gHacks
Lifewire
Press · 14 Sep 2021, 07:00 · Latest Chrome Update Addresses Major Security Issues - Lifewire
How-To Geek
Press · 14 Sep 2021, 07:00 · Update Google Chrome Right Now to Fix Active Zero-Day Exploits - How-To Geek
Malwarebytes
Press · 14 Sep 2021, 07:00 · Update now! Google Chrome fixes two in-the-wild zero-days - Malwarebytes
Lifehacker
Press · 14 Sep 2021, 07:00 · Update Google Chrome Immediately - Lifehacker
BleepingComputer
Press · 13 Sep 2021, 07:00 · Google patches 10th Chrome zero-day exploited in the wild this year - BleepingComputer

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.6 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

0

Public exploit entries / repo candidates

Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.6; EPSS 33.2%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:26.907878+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
First press mention
13 Sep 2021, 07:00
Published
08 Oct 2021, 20:50
Latest press mention
29 Oct 2021, 07:00
Added to the CISA KEV catalog
03 Nov 2021, 00:00
Score calculated
05 Nov 2026, 13:58