CVE-2021-21226: 
Node.js vulnerability analysis and mitigation

CVE-2021-21226 is a Use-after-free vulnerability discovered in the navigation component of Google Chrome versions prior to 90.0.4430.85. The vulnerability was reported by Brendon Tiszka (@btiszka) supporting the EFF and was disclosed in April 2021 (Chrome Release).

The vulnerability is classified as a Use-after-free (CWE-416) issue in the navigation component of Chrome. It received a CVSS v3.1 base score of 9.6 (CRITICAL) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, indicating high severity with potential for complete system compromise (NVD).

The vulnerability allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This could lead to arbitrary code execution outside the browser's security sandbox (NVD).

The vulnerability was patched in Chrome version 90.0.4430.85. Users and administrators are advised to update to this version or later. Multiple Linux distributions including Debian, Fedora, and Gentoo have released security updates to address this vulnerability (Debian Advisory, Gentoo Advisory).