CVE-2021-21138
CVE-2021-21138
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Feb 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file.
Affected products
Google · Chrome