CVE-2021-21107

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.141

Description The issue is related to a use after free in drag and drop functionality, potentially allowing a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information.

Recommendations For versions prior to 87.0.4280.141, update to version 87.0.4280.141 or later to resolve the issue. As a temporary workaround, consider restricting the use of drag and drop functionality in Google Chrome on Linux until a patch is applied.