CVE-2021-30529: 
vulnerability analysis and mitigation

CVE-2021-30529 is a security vulnerability discovered in Google Chrome's Bookmarks feature affecting versions prior to 91.0.4472.77. The vulnerability was disclosed and patched in May 2021 (Chrome Release).

The vulnerability is classified as a Use-After-Free (UAF) issue in the Bookmarks component of Google Chrome. It has been assigned a CVSS v3.1 Base Score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability could allow an attacker who convinces a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser context (NVD).

The vulnerability requires user interaction in the form of installing a malicious extension and accessing a specially crafted HTML page. The attack complexity is considered Low according to the CVSS scoring, indicating that the attack can be performed with relative ease once the preconditions are met (NVD).

The vulnerability was patched in Chrome version 91.0.4472.77. Users and administrators are advised to update to this version or later to mitigate the risk. The fix was also distributed to various Linux distributions including Fedora 33 and 34 through their respective update channels (Fedora Update).