CVE-2021-21191

CVSS 3.1: 8.8 high
EPSS: 1%p72
Published: Mar 16, 2021 · Mar 16, 2021
Modified: Jun 17, 2026

Analyze CVE-2021-21191 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendors: google fedoraproject debian

Products: chrome, fedora, debian linux

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news

1 story

Google fixes the third actively exploited Chrome 0

Security AffairsMar 15, 08:13 UTC · Mar 15, 2021Exploit / PoCExploitedCVE-2021-21193 CVE-2021-21191 CVE-2021-21192+73 · 2 reads