CVE-2021-30620

Critical 8.8

Insufficient policy enforcement in Blink in Google Chrome prior to 93.0.4577.63 allowed a remote attacker to bypass content security policy via a crafted HTML page.

Published September 3, 2021.