CVE-2021-21106: Use after free in autofill
Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-21106?
CVE-2021-21106 has a high severity rating due to its potential for sandbox escape and remote code execution.
How do I fix CVE-2021-21106?
To remediate CVE-2021-21106, users should update Google Chrome to version 87.0.4280.141 or later.
What products are affected by CVE-2021-21106?
CVE-2021-21106 affects Google Chrome prior to version 87.0.4280.141 and various versions of Chromium.
Can CVE-2021-21106 be exploited remotely?
Yes, CVE-2021-21106 can potentially be exploited remotely through a crafted HTML page.
Is it safe to use unpatched versions of Chrome due to CVE-2021-21106?
Using unpatched versions of Chrome with CVE-2021-21106 is not safe and exposes users to significant security risks.