CVE-2021-21228

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.93

Description The issue is related to insufficient policy enforcement in extensions, allowing a remote attacker to impact data integrity by convincing a user to install a malicious extension. This can lead to bypassing navigation restrictions via a crafted Chrome Extension.

Recommendations For Google Chrome versions prior to 90.0.4430.93, update to version 90.0.4430.93 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to only trusted sources until the update is applied.