CVE-2021-21226 - log back

CVE-2021-21226 edited at 26 Apr 2021 21:04:36
Type
- Arbitrary code execution
+ Sandbox escape
Description
- A use after free security issue has been found in the navigation component of the Chromium browser before version 90.0.4430.85.
+ Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
References
https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html
https://crbug.com/1197904
Notes
CVE-2021-21226 edited at 20 Apr 2021 19:58:26
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Arbitrary code execution
Description
+ A use after free security issue has been found in the navigation component of the Chromium browser before version 90.0.4430.85.
References
+ https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html
+ https://crbug.com/1197904
CVE-2021-21226 created at 20 Apr 2021 19:53:54