What’s Vulnerable › Vulnerabilities
CVE-2021-30605
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-09-08 · updated 2026-06-17
- Weakness: CWE-287
Description
Inappropriate implementation in the ChromeOS Readiness Tool installer on Windows prior to 1.0.2.0 loosens DCOM access rights on two objects allowing an attacker to potentially bypass discretionary access controls.
Affected products
- Google Chrome Os Readiness Tool: before 1.0.2.0 — fixed in 1.0.2.0
How to fix
Upgrade to a fixed version: Google Chrome Os Readiness Tool 1.0.2.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2021-30605 or the next vulnerability affects your stack