CVE-2021-21163

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72

Description The issue is related to insufficient data validation in Reader Mode, allowing a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. This can lead to unauthorized access to protected information.

Recommendations For versions prior to 89.0.4389.72, update to version 89.0.4389.72 or later to resolve the issue. As a temporary workaround, consider disabling Reader Mode until a patch is available. Restrict access to potentially malicious servers and crafted HTML pages to minimize the risk of exploitation.