CVE-2021-21208

—

CVSS 3.1

6.5 medium

EPSS

1%p71

Published

Apr 26, 2021 (Apr 26, 2021)

Modified

Jun 17, 2026

Description

Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code.

Vendors: google debian fedoraproject
Products: chrome, debian linux, fedora
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.