CVE-2021-21194: 
Node.js vulnerability analysis and mitigation

CVE-2021-21194 is a use-after-free vulnerability discovered in the screen sharing functionality of Google Chrome versions prior to 89.0.4389.114. The vulnerability was reported on February 23, 2021, by security researchers Leecraso and Guang Gong of 360 Alpha Lab, and was subsequently patched in March 2021 (Chrome Release).

The vulnerability is classified as a use-after-free bug specifically affecting the screen capture functionality in Chrome. The severity of this vulnerability was rated as High, and Google awarded a $20,000 bounty for its discovery, indicating its significant security impact (Chrome Release).

This vulnerability could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page, potentially leading to arbitrary code execution (NVD).

The vulnerability was patched in Chrome version 89.0.4389.114. Users and administrators are advised to upgrade to this version or later. Various Linux distributions have also released security updates to address this vulnerability, including Ubuntu, Fedora, and Gentoo (Gentoo Security, Fedora Update).