PT-2020-5609

CVE-2021-21170

·

Published

2020-07-31

·

Updated

2026-10-01

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72
Description The issue is related to incorrect security UI in the Loader component of Google Chrome, allowing a remote attacker who has compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. This could potentially lead to unauthorized access to protected information.
Recommendations For versions prior to 89.0.4389.72, update to version 89.0.4389.72 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2021-1460
ALT-PU-2021-1511
ALT-PU-2021-1668
ALT-PU-2021-1751
ALT-PU-2021-2141
CLEANSTART-2024-GG92562
DSA-4886-1
MGASA-2021-0142
OPENSUSE-SU-2021:0392-1
OPENSUSE-SU-2021_0392-1
OPENSUSE-SU-2021:0401-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾