CVE-2021-21193: Use after free in Blink
Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 90.0.4430.212-1~deb10u1Fixed in 116.0.5845.180-1~deb11u1Fixed in 118.0.5993.70-1~deb11u1Fixed in 116.0.5845.180-1~deb12u1Fixed in 118.0.5993.70-1~deb12u1Fixed in 118.0.5993.70-1 - Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 89.0.4389.90
Event History
Frequently Asked Questions
What is CVE-2021-21193?
CVE-2021-21193 is a use-after-free vulnerability in Google Chromium Blink that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Which web browsers are affected by CVE-2021-21193?
Web browsers that utilize Chromium, including Google Chrome and Microsoft Edge, are affected by CVE-2021-21193.
What is the severity of CVE-2021-21193?
CVE-2021-21193 has a severity rating of 8.8 (high).
How can I fix CVE-2021-21193?
Update your web browser to the latest version provided by your vendor or distribution.
Where can I find more information about CVE-2021-21193?
You can find more information about CVE-2021-21193 at the following references: [Reference 1](https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html), [Reference 2](https://crbug.com/1186287), [Reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/)