CVE-2021-30554

A use-after-free vulnerability in Google Chromium WebGL allowed remote attackers to exploit heap corruption via a crafted HTML page, affecting multiple Chromium-based browsers.

This vulnerability was actively exploited in the wild (KEV) and could lead to remote code execution, posing a significant risk to systems relying on Chromium browsers. DIB organizations must ensure their browsers are patched promptly to prevent exploitation and maintain compliance with security requirements. The failure highlights the importance of timely patch management and monitoring for actively exploited vulnerabilities.

Shame score — The vulnerability was actively exploited in the wild and affected multiple widely used browsers, indicating a significant security lapse that could have been mitigated with timely patching.