CVE-2021-21166

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.72

Description: A data race in the audio component of Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue is related to a use-after-free vulnerability, which could allow an attacker to execute arbitrary code. The vulnerability has been reportedly exploited in real-world attacks.

Recommendations: For Google Chrome versions prior to 89.0.4389.72, update to version 89.0.4389.72 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable audio components until a patch is applied.