CVE-2021-30605

7.8 highEPSS 0.1%

High (7.8) in google chrome os readiness tool. EPSS 0.1% chance of exploitation in the next 30 days.

Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2021-09-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:chrome_os_readiness_tool

References

https://bit.ly/37CS6G9
https://crbug.com/1240952
https://bit.ly/37CS6G9
https://crbug.com/1240952

Check your stack JSON