
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2021-21193 is a Use-after-free vulnerability discovered in the Blink rendering engine of Google Chrome versions prior to 89.0.4389.90. The vulnerability was reported anonymously to Google on March 9, 2021, and was quickly patched in a security update released on March 12, 2021 (Chrome Release, NVD).
The vulnerability is classified as a Use-after-free issue in the Blink rendering engine of Chrome. According to IBM's assessment, the vulnerability received a CVSS score of 8.8 out of 10, indicating its high severity. The flaw could be exploited through a specially crafted HTML page, potentially leading to heap corruption (Hacker News).
The vulnerability could allow a remote attacker to execute arbitrary code on the target system or cause a denial of service condition. By persuading a victim to visit a specially crafted website, an attacker could potentially exploit this vulnerability to execute malicious code (Hacker News).
Google released version 89.0.4389.90 for Windows, Mac, and Linux to address this vulnerability. Users were advised to update their Chrome browsers immediately by navigating to Settings > Help > About Google Chrome to mitigate the risk (Hacker News).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."