Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2021-11-17. Apply updates per vendor instructions.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
3 versions affected across 3 products
This write-up is 5+ years overdue... How I found a security bug (CVE-2021-21148) by poking at Chrome's brand-new readable byte streams in 2021, and accidentally became a security researcher. 😅 https://mattias.buelens.com/post/accidental-security-researcher
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | debian | debian_linux | 10.0 | - | - |
| OS | fedoraproject | fedora | 32 | - | - |
| OS | fedoraproject | fedora | 33 | - | - |
| App | chrome | - | - | - |