CVE-2021-21224

CVE Published 2021-04-26
Related CWE(s) CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
Related Vendor(s) fedoraproject, debian, google
Related Product(s) fedora, chrome, debian_linux
Exploitation Reported (CISA KEV) 2021-11-03
CVSS 3 Base Score 8.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References