CVE-2021-21111: Insufficient policy enforcement in WebUI
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-21111?
The severity of CVE-2021-21111 is considered high due to the potential for a sandbox escape via malicious Chrome extensions.
How do I fix CVE-2021-21111?
To fix CVE-2021-21111, users should update Google Chrome to version 87.0.4280.141 or later.
Which versions of Chrome are affected by CVE-2021-21111?
CVE-2021-21111 affects Google Chrome versions prior to 87.0.4280.141.
Can CVE-2021-21111 be exploited remotely?
Yes, an attacker could exploit CVE-2021-21111 remotely by convincing a user to install a malicious Chrome extension.
Is CVE-2021-21111 present in Chromium projects?
CVE-2021-21111 affects certain versions of Chromium, specifically earlier than version 90.0.4430.212.