CVE-2021-21193: Google Chromium Blink Use-After-Free Vulnerability

Reference Links

• https://security-tracker.debian.org/tracker/CVE-2021-21193
• https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html (Advisory)
• https://crbug.com/1186287
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/
• https://security.gentoo.org/glsa/202104-08
• https://www.debian.org/security/2021/dsa-4886
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/
• https://nvd.nist.gov/vuln/detail/CVE-2021-21193

Parent vulnerabilities

(Appears in the following advisories)

• 5280375550425303743

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-21191
• CVE-2021-21192

Frequently Asked Questions

• What is CVE-2021-21193?

  CVE-2021-21193 is a use-after-free vulnerability in Google Chromium Blink that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

• Which web browsers are affected by CVE-2021-21193?

  Web browsers that utilize Chromium, including Google Chrome and Microsoft Edge, are affected by CVE-2021-21193.

• What is the severity of CVE-2021-21193?

  CVE-2021-21193 has a severity rating of 8.8 (high).

• How can I fix CVE-2021-21193?

  Update your web browser to the latest version provided by your vendor or distribution.

• Where can I find more information about CVE-2021-21193?

  You can find more information about CVE-2021-21193 at the following references: [Reference 1](https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html), [Reference 2](https://crbug.com/1186287), [Reference 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/)