CVE-2021-4053: Use after free in UI
Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 96.0.4664.93 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-4053.
What software is affected by this vulnerability?
Google Chrome on Linux prior to version 96.0.4664.93 is affected by this vulnerability.
How can a remote attacker potentially exploit this vulnerability?
A remote attacker can potentially exploit this vulnerability by crafting a malicious HTML page that triggers a use after free issue in the UI of Google Chrome.
What is the severity of CVE-2021-4053?
The severity of CVE-2021-4053 has not been mentioned in the provided information.
What is the recommended remedy for this vulnerability?
The recommended remedy is to update to Google Chrome version 96.0.4664.93 or newer.