CVE-2021-21117: Insufficient policy enforcement in Cryptohome
Published Oct 10, 2020
·Updated
Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file.
Credit
Rory McNamara
Affected Software
2 affected componentsFixes available
Google Chrome<88.0.4324.96
88.0.4324.96
Google Chrome<88.0.4324.96
Event History
Oct 10, 2020
CVE Published
12:00 AM
Feb 9, 2021
CVE Published
via MITRE·01:55 PM
Data Sourced
via MITRE·01:55 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2021-21118
- CVE-2021-21119
- CVE-2021-21120
- CVE-2021-21121
- CVE-2021-21122
- CVE-2021-21123
- CVE-2021-21124
- CVE-2021-21125
- CVE-2020-16044
- CVE-2021-21126
- CVE-2021-21127
- CVE-2021-21128
- CVE-2021-21129
- CVE-2021-21130
- CVE-2021-21131
- CVE-2021-21132
- CVE-2021-21133
- CVE-2021-21134
- CVE-2021-21135
- CVE-2021-21136
- CVE-2021-21137
- CVE-2021-21138
- CVE-2021-21139
- CVE-2021-21140
- CVE-2021-21141
Frequently Asked Questions
1
What is the severity of CVE-2021-21117?
CVE-2021-21117 has been classified as a high severity vulnerability due to its potential for OS-level privilege escalation.
2
How do I fix CVE-2021-21117?
To fix CVE-2021-21117, users should update Google Chrome to version 88.0.4324.96 or later.
3
Who is affected by CVE-2021-21117?
CVE-2021-21117 affects all users of Google Chrome versions prior to 88.0.4324.96.
4
What type of vulnerability is CVE-2021-21117?
CVE-2021-21117 is an insufficient policy enforcement vulnerability in Cryptohome within Google Chrome.
5
Can CVE-2021-21117 be exploited remotely?
No, CVE-2021-21117 requires local access to the system to be successfully exploited.