CVE-2021-4316: Inappropriate implementation in Cast UI

Q: What is the severity of CVE-2021-4316?

The severity of CVE-2021-4316 is classified as Low.

Q: How do I fix CVE-2021-4316?

To fix CVE-2021-4316, update Google Chrome to version 96.0.4664.45 or later.

Q: Who is affected by CVE-2021-4316?

CVE-2021-4316 affects users of Google Chrome prior to version 96.0.4664.45.

Q: What type of vulnerability is CVE-2021-4316?

CVE-2021-4316 is an inappropriate implementation vulnerability in Cast UI in Google Chrome.

Q: Can CVE-2021-4316 be exploited remotely?

Yes, CVE-2021-4316 can be exploited remotely via a crafted HTML page.

Published Nov 26, 2020

Updated

Inappropriate implementation in Cast UI in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to spoof browser UI via a crafted HTML page. (Chromium security severity: Low)

Credit

Khalil Zhani

Affected Software

3 affected componentsFixes available

Google Chrome<96.0.4664.45

96.0.4664.45

Google Chrome<96.0.4664.45

debian/chromium

150.0.7871.100-1~deb12u1156.0.8078.79-1~deb12u1150.0.7871.181-1~deb13u1156.0.8078.79-1~deb13u1156.0.8078.79-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 96.0.4664.45
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1

Event History

Nov 26, 2020

CVE Published

12:00 AM

Jul 28, 2023

CVE Published

via MITRE·11:26 PM

Data Sourced

via MITRE·11:26 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2021-4316?