CVE-2021-37967

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 94.0.4606.54

Description The issue is related to the Background Fetch API in Google Chrome, which can lead to information disclosure in the error domain. A remote attacker who has compromised the renderer process can exploit this to leak cross-origin data via a crafted HTML page.

Recommendations For versions prior to 94.0.4606.54, update to version 94.0.4606.54 or later to resolve the issue. As a temporary workaround, consider restricting access to the Background Fetch API until a patch is available.