CVE-2021-37985

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 95.0.4638.54

Description The issue is related to a use after free in the V8 JavaScript engine, which can lead to heap corruption. This can be exploited by a remote attacker who has convinced a user to allow a connection to the debugger, potentially allowing the execution of arbitrary code via a crafted HTML page.

Recommendations For versions prior to 95.0.4638.54, update to version 95.0.4638.54 or later to resolve the issue. As a temporary workaround, consider restricting access to the debugger to minimize the risk of exploitation. Avoid using the vulnerable V8 JavaScript engine until the issue is resolved.