First published: Mon Apr 05 2021(Updated: )
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Credit: chrome-cve-admin@google.com chrome-cve-admin@google.com Jose Martinez (tr0y4) VerSprite Inc chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/chromium | 90.0.4430.212-1~deb10u1 116.0.5845.180-1~deb11u1 118.0.5993.70-1~deb11u1 116.0.5845.180-1~deb12u1 118.0.5993.70-1~deb12u1 118.0.5993.70-1 | |
Google Chrome | <90.0.4430.85 | |
Debian Debian Linux | =10.0 | |
Fedoraproject Fedora | =32 | |
Fedoraproject Fedora | =33 | |
Fedoraproject Fedora | =34 | |
Google Chrome | <90.0.4430.85 | 90.0.4430.85 |
<90.0.4430.85 | ||
=10.0 | ||
=32 | ||
=33 | ||
=34 | ||
Google Chromium V8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-21224 is a type confusion vulnerability in Google Chromium V8 Engine that allows remote code execution.
Software affected by CVE-2021-21224 includes web browsers that utilize Chromium, such as Google Chrome and Microsoft Edge, as well as Debian Linux and Fedoraproject Fedora.
CVE-2021-21224 has a severity rating of 8.8, which is considered high.
To fix CVE-2021-21224, it is recommended to update to the latest versions of affected software, such as Google Chrome version 90.0.4430.212, Debian Chromium version 90.0.4430.212-1~deb10u1, and Fedoraproject Chromium version 118.0.5993.70-1.
For more information about CVE-2021-21224, you can refer to the following references: [1] [2] [3]