CVE-2021-30537: 
vulnerability analysis and mitigation

CVE-2021-30537 is a security vulnerability discovered in Google Chrome prior to version 91.0.4472.77, involving insufficient policy enforcement in cookies. The vulnerability was disclosed on June 7, 2021, and affects the cookie handling mechanism in Google Chrome browsers (NVD, Chrome Release).

The vulnerability is characterized by insufficient policy enforcement in the browser's cookie handling mechanism, which could allow a remote attacker to bypass cookie policy through a crafted HTML page. The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, indicating network accessibility with low attack complexity but requiring user interaction (NVD).

The vulnerability could allow remote attackers to bypass cookie policies, potentially leading to unauthorized access to cookie-related information or manipulation of cookie-based security controls (NVD, Gentoo Advisory).

The vulnerability requires user interaction and can be exploited remotely through a crafted HTML page. The attack vector is network-accessible, with low attack complexity and no privileges required for exploitation (NVD).

The vulnerability was patched in Google Chrome version 91.0.4472.77. Users and administrators are advised to upgrade to this version or later to mitigate the risk. Various Linux distributions have also released security updates to address this vulnerability (Chrome Release, Gentoo Advisory).