CVE-2021-21147 — Google Chrome vulnerability

7 documents7 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 52.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Google ChromeChromiumDebian Chromium+3 more
Timeline
PublishedFeb 9
Latest updateMay 24

Description

Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages6 packages

▶CVEListV5google/chromeunspecified — 88.0.4324.146
▶NVDgoogle/chrome< 88.0.4324.146
▶debiandebian/chromium< chromium 88.0.4324.146-1 (bookworm)
▶Debianchromium/chromium< 88.0.4324.146-1+3

Also affects: Fedora 32, 33

🔴Vulnerability Details

2
GHSA
GHSA-6f56-qgf6-vv2x: Inappropriate implementation in Skia in Google Chrome prior to 88↗2022-05-24
▶
OSV
CVE-2021-21147: Inappropriate implementation in Skia in Google Chrome prior to 88↗2021-02-09
▶

💥Exploits & PoCs

1
Nuclei
WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting
▶

📋Vendor Advisories

3
Microsoft
Chromium CVE-2021-21147: Inappropriate implementation in Skia↗2021-02-09
▶
Chrome
Stable Channel Update for Desktop: CVE-2021-21145↗2021-02-02
▶
Debian
CVE-2021-21147: chromium - Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 all...↗2021
▶