Wiz
Vulnerability DatabaseCVE-2021-33970

CVE-2021-33970: 
Chromium vulnerability analysis and mitigation

Overview

Buffer Overflow vulnerability in Qihoo 360 Chrome version 13.0.2170.0 allows attackers to escalate privileges. The vulnerability was assigned CVE-2021-33970 and received a CVSS v3.1 base score of 10.0 CRITICAL (NVD).

Technical details

The vulnerability is classified as a Buffer Overflow (CWE-843: Access of Resource Using Incompatible Type - 'Type Confusion'). It has a critical severity rating with CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating network accessibility, low attack complexity, no privileges required, and no user interaction needed (NVD).

Impact

The vulnerability has critical impact potential, affecting all three security properties - confidentiality, integrity, and availability at high levels. Successful exploitation could allow an attacker to gain elevated privileges on the affected system (NVD).

Community reactions

The vulnerability was reported through Qihoo 360's security bounty program and received a bounty payment of 764.18 USD for its critical severity (Memory Corruptor).

Additional resources

Source: This report was generated using AI

Related Chromium vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-13230HIGH8.8
  • Google ChromeGoogle Chrome
  • chromium
NoYesNov 18, 2025
CVE-2025-13229HIGH8.8
  • Google ChromeGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesNov 18, 2025
CVE-2025-13228HIGH8.8
  • Google ChromeGoogle Chrome
  • chromium
NoYesNov 18, 2025
CVE-2025-13227HIGH8.8
  • Google ChromeGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesNov 18, 2025
CVE-2025-13992MEDIUM4.7
  • Google ChromeGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesDec 03, 2025

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo