CVE-2021-21142: Use after free in Payments

Reference Links

• https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html (Advisory)
• https://crbug.com/1169317
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/
• https://security.gentoo.org/glsa/202104-08
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/

Parent vulnerabilities

(Appears in the following advisories)

• 714493762241889915

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-21143
• CVE-2021-21144
• CVE-2021-21145
• CVE-2021-21146
• CVE-2021-21147

Frequently Asked Questions

• What is the severity of CVE-2021-21142?

  CVE-2021-21142 has a high severity rating due to its potential for remote code execution through a sandbox escape.

• How do I fix CVE-2021-21142?

  To fix CVE-2021-21142, update Google Chrome to version 88.0.4324.146 or higher.

• What platforms are affected by CVE-2021-21142?

  CVE-2021-21142 affects Google Chrome on Mac prior to version 88.0.4324.146.

• Can CVE-2021-21142 be exploited remotely?

  Yes, CVE-2021-21142 can be exploited remotely via a crafted HTML page.

• What happens if I don't update my browser regarding CVE-2021-21142?

  If you don't update, your browser remains vulnerable to potential sandbox escape attacks from malicious webpages.