CVE-2021-21122: 
Node.js vulnerability analysis and mitigation

A Use-after-free vulnerability in Blink (CVE-2021-21122) was discovered in Google Chrome versions prior to 88.0.4324.96. The vulnerability was reported on December 28, 2020, and was patched in January 2021 (Chrome Release).

The vulnerability is classified as a Use-after-free (CWE-416) issue in the Blink engine of Google Chrome. It received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that it can be exploited remotely with low attack complexity, requires no privileges, but does need user interaction (NVD).

If successfully exploited, this vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, potentially leading to arbitrary code execution within the context of the browser (NVD).

The vulnerability requires user interaction, specifically visiting a maliciously crafted HTML page. The attack can be executed remotely with low attack complexity, making it an attractive target for potential attackers (NVD).

The vulnerability was fixed in Google Chrome version 88.0.4324.96 for Mac and Linux, and version 88.0.4324.104 for Windows. Users are advised to update their Chrome browsers to these versions or later to mitigate the risk (Chrome Release).