CVE-2021-37980

—

CVSS 3.1

7.4 high

EPSS

1%p72

Published

Nov 2, 2021 (Nov 2, 2021)

Modified

Jun 17, 2026

Description

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows.

Vendors: google fedoraproject debian
Products: chrome, fedora, debian linux
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news1 stories

Google addresses four high

Security AffairsOct 9, 14:59 UTC · Oct 9, 2021Exploit / PoC CVE-2021-37977 CVE-2021-37978 CVE-2021-37979+1 CVEs