CVE-2021-21230

—

CVSS 3.1

8.8 high

EPSS

2%p74

Published

Apr 30, 2021 (Apr 30, 2021)

Modified

Jun 17, 2026

Description

Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Vendors: google fedoraproject debian
Products: chrome, fedora, debian linux
Weakness: CWE-843
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news1 stories

Google addresses a high severity flaw in V8 engine in Chrome

Security AffairsApr 28, 13:46 UTC · Apr 28, 2021Exploit / PoC CVE-2021-21227 CVE-2020-16040 CVE-2020-15965+6 CVEs

60