CVE-2021-30524: 
vulnerability analysis and mitigation

CVE-2021-30524 is a Use-after-free vulnerability discovered in the TabStrip component of Google Chrome versions prior to 91.0.4472.77. The vulnerability was reported on April 8, 2021, and was addressed in the Chrome stable channel update released on May 25, 2021 (Chrome Release).

The vulnerability is classified as a Use-after-free (CWE-416) issue in the TabStrip component of Google Chrome. It received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating high severity with potential for significant impact (NVD).

If successfully exploited, this vulnerability could allow an attacker who convinces a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. The high CVSS score indicates potential for significant impact on the confidentiality, integrity, and availability of the system (NVD).

The vulnerability requires user interaction in the form of installing a malicious extension and interacting with a crafted HTML page. The attack complexity is considered low, requiring no special privileges for exploitation (NVD).

The vulnerability was patched in Chrome version 91.0.4472.77. Users and administrators are advised to upgrade to this version or later. Various Linux distributions have also released security updates to address this vulnerability, including Fedora and Gentoo (Gentoo Advisory, Fedora Advisory).