CVE-2021-21110

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…

published January 8, 2021

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

⚠️ A crafty HTML page is all it takes to exploit this sneaky use-after-free bug in Chrome's safe browsing! Think of it like a restaurant that serves a dish nobody double-checks the ingredients for. If a chef slips in something harmful without a second glance, it could ruin the entire meal! An attacker could potentially escape the intended safety net, leading to unauthorized access or data leakage. The implications could range from minor disruptions to significant privacy violations, depending on how the attack unfolds.

Put simply

Think of it like a restaurant that serves a dish nobody double-checks the ingredients for. If a chef slips in something harmful without a second glance, it could ruin the entire meal! This vulnerability arises from a use-after-free condition in Chrome's safe browsing component, allowing attackers to manipulate program memory incorrectly, which could lead to a sandbox escape.

What to do

An attacker could potentially escape the intended safety net, leading to unauthorized access or data leakage. The implications could range from minor disruptions to significant privacy violations, depending on how the attack unfolds. Upgrade your Google Chrome to version 87.0.4280.141 or later to patch this vulnerability. Regularly check for updates to ensure your browser is always running the latest version. 🛡️ You've got this! By following these simple steps, you'll keep your browsing experience safe and sound! 🔒

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03095 · 87.7th percentile
Published
2021-01-08T17:56Z
EPSS history
Timeline
  • 08 JAN 17:56Z
    Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML…
    cvelistv5