CVE-2021-21114: 
Google Chrome vulnerability analysis and mitigation

CVE-2021-21114 is a Use-after-free vulnerability in the audio component of Google Chrome discovered prior to version 87.0.4280.141. The vulnerability was reported by Man Yue Mo of GitHub Security Lab on November 17, 2020, and was publicly disclosed on January 6, 2021 (Chrome Release).

The vulnerability is classified as a Use-after-free (CWE-416) issue in the audio component of Chrome. It received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network accessibility, low attack complexity, and no privileges required but user interaction is needed (NVD).

The vulnerability could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution with the privileges of the Chrome browser process (NVD).

The vulnerability requires user interaction, specifically visiting a maliciously crafted HTML page. No evidence of active exploitation in the wild was reported at the time of disclosure (Chrome Release).

Google released version 87.0.4280.141 to address this vulnerability. Users and administrators are advised to upgrade to this version or later. The fix was also backported to various Linux distributions including Debian, Fedora, and Gentoo (Debian Advisory, Fedora Update, Gentoo Advisory).