PT-2021-2269

CVE-2021-21166

·

تاريخ النشر

2021-02-11

·

تاريخ التحديث

2026-10-31

الوصف من

CVSS 3.1
8.8
عالية
المقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.72
Description: A data race in the audio component of Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue is related to a use-after-free vulnerability, which could allow an attacker to execute arbitrary code. The vulnerability has been reportedly exploited in real-world attacks.
Recommendations: For Google Chrome versions prior to 89.0.4389.72, update to version 89.0.4389.72 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable audio components until a patch is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2021-1460
ALT-PU-2021-1511
ALT-PU-2021-1668
ALT-PU-2021-1751
ALT-PU-2021-2141
CLEANSTART-2024-KP33813
CLEANSTART-2024-VG67704
DSA-4886-1
MGASA-2021-0142
OPENSUSE-SU-2021:0392-1
OPENSUSE-SU-2021_0392-1
OPENSUSE-SU-2021:0401-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾