CVE-2021-37991

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 95.0.4638.54

Description The issue is caused by a race condition in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially exploit this via a crafted HTML page, allowing them to bypass existing security restrictions. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 95.0.4638.54, update to version 95.0.4638.54 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable V8 engine features until a patch is available. Avoid using crafted HTML pages that could trigger the heap corruption exploit.