CVE-2021-21200: 
Google Chrome vulnerability analysis and mitigation

Out of bounds read vulnerability (CVE-2021-21200) was discovered in WebUI Settings component of Google Chrome versions prior to 89.0.4389.72. The vulnerability allowed remote attackers to perform an out of bounds memory read through a crafted HTML page. This issue was reported by Lucas Pinheiro from Microsoft Browser Vulnerability Research on January 11, 2021 and was assigned a Low severity rating by Chrome security team (Chrome Release).

The vulnerability is classified as an Out-of-bounds Read (CWE-125) with a CVSS v3.1 Base Score of 5.4 (Medium). The attack vector requires network access and user interaction, as indicated by the CVSS vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L (NVD).

If successfully exploited, this vulnerability could allow an attacker to perform an out of bounds memory read operation, potentially leading to information disclosure and availability impacts. The vulnerability has low confidentiality impact and low availability impact, with no integrity impact (NVD).

The vulnerability was fixed in Chrome version 89.0.4389.72. Users should update to this version or later to mitigate the risk. The fix was released as part of Chrome's March 2021 stable channel update (Chrome Release).