Google Chrome again urgently updates to patch serious security holes

Tracked under the code CVE-2021-30554, this new vulnerability has a high severity level. It exploits a weakness in WebGL (aka the web graphics library), a JavaScript API for rendering interactive 2D and 3D graphics in the browser.

If hackers attack computers based on CVE-2021-30554 they can corrupt valid data leading to crashes and even execute unauthorized commands.

According to a Google Chrome manager, an anonymous researcher reported this vulnerability to Google. Google experts also confirmed that CVE-2021-30554 is being actively exploited by hackers.

This is the second time Google has had to roll out an urgent update to Chrome in less than 10 days. Previously, on June 9, Google had to release a patch for the CVE-2021-30511 vulnerability that is also being exploited by hackers.

Since the beginning of the year, Google has patched up to 8 zero-day vulnerabilities in Chrome including CVE-2021-30554. Google said it is grateful to the developers and security experts who assisted them in finding and reporting security vulnerabilities.

Google has also rewarded researchers who report to them about security vulnerabilities. The reward for researchers who discover the four newly patched vulnerabilities ranges from $7,500 to $10,000.

Google recommends that users soon update to Chrome version 91.0.44472.114 to patch the above security holes.

Samuel Daniel

Update 18 June 2021