
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2021-21119 is a Use-after-free vulnerability discovered in the Media component of Google Chrome versions prior to 88.0.4324.96. The vulnerability was reported on December 20, 2020, and publicly disclosed on January 19, 2021. This security flaw affects Google Chrome browsers across Windows, Mac, and Linux operating systems (Chrome Release).
The vulnerability is classified as a Use-after-free (CWE-416) issue in the Media component of Chrome. It received a CVSS v3.1 base score of 8.8 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability requires user interaction and can be exploited through a crafted HTML page when the renderer process has been compromised (NVD).
If successfully exploited, this vulnerability could allow a remote attacker who has compromised the renderer process to potentially exploit heap corruption. The high CVSS score indicates that successful exploitation could lead to significant impacts on confidentiality, integrity, and availability of the affected system (NVD).
The vulnerability requires the attacker to first compromise the renderer process and then use a specially crafted HTML page to trigger the use-after-free condition. The attack complexity is considered low, but it does require user interaction to be successful (NVD).
Google addressed this vulnerability in Chrome version 88.0.4324.96 for Mac and Linux, and version 88.0.4324.104 for Windows. Users are advised to update their Chrome browsers to these versions or later to mitigate the risk (Chrome Release).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."