CVE-2021-31956 and CVE-2021-21224

Security researchers observed the Magnitude Exploit Kit expand to include exploits for Chromium-based browsers and a Windows NTFS privilege escalation (CVE-2021-31956), while also reporting a Chromium V8 type-confusion RCE (CVE-2021-21224); Microsoft has noted CVE-2021-31956 was actively exploited in the wild and Kaspersky linked these flaws to an attack chain associated with the PuzzleMaker Group. Arctic Wolf recommends patching affected Google Chrome, Microsoft Edge, and Windows versions to mitigate remote code execution and privilege escalation risks.