Wiz
Vulnerability DatabaseCVE-2021-21229

CVE-2021-21229: 
Google Chrome vulnerability analysis and mitigation

Overview

CVE-2021-21229 is a security vulnerability affecting Google Chrome on Android prior to version 90.0.4430.93. The vulnerability involves incorrect security UI implementation in the downloads feature that could allow a remote attacker to perform domain spoofing through a crafted HTML page (NVD, CVE).

Technical details

The vulnerability was identified as a user interface security flaw in the Chrome downloads component. It was discovered by security researcher Mohit Raj (shadow2639) and reported on April 12, 2021. The issue was addressed in Chrome version 90.0.4430.93 with a medium severity rating (Chrome Releases).

Impact

The vulnerability could enable an attacker to perform domain spoofing attacks through specially crafted HTML pages, potentially misleading users about the source of downloaded files (Debian Security).

Exploitability

The vulnerability requires user interaction with a maliciously crafted HTML page. It affects Google Chrome on Android devices running versions prior to 90.0.4430.93 (NVD).

Mitigation and workarounds

The vulnerability has been patched in Google Chrome version 90.0.4430.93. Users and system administrators are advised to upgrade to this version or later. The fix has been incorporated into various Linux distributions including Debian, Fedora, and Gentoo (Debian Security, Gentoo Security).

Additional resources

Linux Distribution fix status

Fix availability across major Linux distributions and their releases.

Arch Linux

Fixed

rolling

vivaldi: 3.8.2259.37-1

Fixed

Source: This report was generated using AI

Related Google Chrome vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-87595CRITICAL9.8
  • Google Chrome logoGoogle Chrome
  • chromium
NoYesSep 09, 2026
CVE-2026-87643CRITICAL9.6
  • Google Chrome logoGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesSep 09, 2026
CVE-2026-87607CRITICAL9.6
  • Google Chrome logoGoogle Chrome
  • chromium
NoYesSep 09, 2026
CVE-2026-87640MEDIUM6.1
  • Google Chrome logoGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesSep 09, 2026
CVE-2026-87597MEDIUM4.8
  • Google Chrome logoGoogle Chrome
  • cpe:2.3:a:google:chrome
NoYesSep 09, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo