PT-2021-2250

CVE-2021-21163

·

تاريخ النشر

2021-03-02

·

تاريخ التحديث

2026-10-01

الوصف من

CVSS 2.0
7.8
عالية
المقاييسAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72
Description The issue is related to insufficient data validation in Reader Mode, allowing a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. This can lead to unauthorized access to protected information.
Recommendations For versions prior to 89.0.4389.72, update to version 89.0.4389.72 or later to resolve the issue. As a temporary workaround, consider disabling Reader Mode until a patch is available. Restrict access to potentially malicious servers and crafted HTML pages to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2021-1460
ALT-PU-2021-1511
ALT-PU-2021-1668
ALT-PU-2021-1751
ALT-PU-2021-2141
CLEANSTART-2024-SX62121
DSA-4886-1
MGASA-2021-0142
OPENSUSE-SU-2021:0392-1
OPENSUSE-SU-2021_0392-1
OPENSUSE-SU-2021:0401-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾