CVE-2021-21114

Description

Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.308

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities fixed in Google Chrome (x64) (87.0.4280.141)Windows
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141)Windows
Multiple vulnerabilities are fixed in Google Chrome For Mac (87.0.4280.141)Mac
chromium security update(DSA-4832-1) chromium_87.0.4280.141-0.1~deb10u1_amd64.debLinux
chromium security update(DSA-4832-1) chromium_87.0.4280.141-0.1~deb10u1_i386.debLinux
chromium security update(DSA-4832-1) Debian_chromium_87.0.4280.141-0.1~deb10u1_amd64.debLinux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Debian)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Centos)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For RedHat)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Suse)Linux
Multiple vulnerabilities fixed in Google Chrome (87.0.4280.141) (For Ubuntu)Linux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-317791Google Chrome (x64) (87.0.4280.141)
PATCH-317790Google Chrome (87.0.4280.141)
PATCH-609673Google Chrome for Mac (132.0.6834.83, 132.0.6834.84)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234