CVE-2021-21177

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72

Description The issue is related to insufficient policy enforcement in the Autofill component of Google Chrome, which can be exploited by a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This is due to weaknesses in the authentication procedure.

Recommendations For versions prior to 89.0.4389.72, update to version 89.0.4389.72 or later to resolve the issue. As a temporary workaround, consider disabling the Autofill feature until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.