CVE-2021-21111
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an...
9.6 CriticalFix available
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
1.08%Up 0.4 points since Apr 14, 2021
What each source reports
NVD Score used
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
CVE-2021-21111- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-1021
- Updated
- 2026-11-02
CVE List No score
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
CVE-2021-21111- Updated
- 2026-11-02
EUVDEUVD-2021-8502 No score
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
EUVD-2021-8502- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-543r-2767-7774 No score
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an...
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
GHSA-543r-2767-7774- Weakness
- CWE-1021
- Updated
- 2026-11-02
OSV
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
CVE-2021-21111- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2021-21111
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
DEBIAN-CVE-2021-21111- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
Show 9 moreShow less
OSVUBUNTU-CVE-2021-21111
Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
- Record
UBUNTU-CVE-2021-21111- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0040-1 No score
Security update for chromium
This update for chromium fixes the following issues:
-
Update to 87.0.4280.141 (boo#1180645)
- CVE-2021-21106: Use after free in autofill
- CVE-2021-21107: Use after free in drag and drop
- CVE-2021-21108: Use after free in media
- CVE-2021-21109: Use after free in payments
- CVE-2021-21110: Use after free in safe browsing
- CVE-2021-21111: Insufficient policy enforcement in WebUI
- CVE-2021-21112: Use after free in Blink
- CVE-2021-21113: Heap buffer overflow in Skia
- CVE-2020-16043: Insufficient data validation in networking
- CVE-2021-21114: Use after free in audio
- CVE-2020-15995: Out of bounds write in V8
- CVE-2021-21115: Use after free in safe browsing
- CVE-2021-21116: Heap buffer overflow in audio
-
Use main URLs instead of redirects in master preferences
- Record
openSUSE-SU-2021:0040-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0041-1 No score
Security update for chromium
This update for chromium fixes the following issues:
-
Update to 87.0.4280.141 (boo#1180645)
- CVE-2021-21106: Use after free in autofill
- CVE-2021-21107: Use after free in drag and drop
- CVE-2021-21108: Use after free in media
- CVE-2021-21109: Use after free in payments
- CVE-2021-21110: Use after free in safe browsing
- CVE-2021-21111: Insufficient policy enforcement in WebUI
- CVE-2021-21112: Use after free in Blink
- CVE-2021-21113: Heap buffer overflow in Skia
- CVE-2020-16043: Insufficient data validation in networking
- CVE-2021-21114: Use after free in audio
- CVE-2020-15995: Out of bounds write in V8
- CVE-2021-21115: Use after free in safe browsing
- CVE-2021-21116: Heap buffer overflow in audio
-
Use main URLs instead of redirects in master preferences
- Record
openSUSE-SU-2021:0041-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0047-1 No score
Security update for chromium
This update for chromium fixes the following issues:
-
Update to 87.0.4280.141 (boo#1180645)
- CVE-2021-21106: Use after free in autofill
- CVE-2021-21107: Use after free in drag and drop
- CVE-2021-21108: Use after free in media
- CVE-2021-21109: Use after free in payments
- CVE-2021-21110: Use after free in safe browsing
- CVE-2021-21111: Insufficient policy enforcement in WebUI
- CVE-2021-21112: Use after free in Blink
- CVE-2021-21113: Heap buffer overflow in Skia
- CVE-2020-16043: Insufficient data validation in networking
- CVE-2021-21114: Use after free in audio
- CVE-2020-15995: Out of bounds write in V8
- CVE-2021-21115: Use after free in safe browsing
- CVE-2021-21116: Heap buffer overflow in audio
-
Use main URLs instead of redirects in master preferences
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2021:0047-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0048-1 No score
Security update for chromium
This update for chromium fixes the following issues:
-
Update to 87.0.4280.141 (boo#1180645)
- CVE-2021-21106: Use after free in autofill
- CVE-2021-21107: Use after free in drag and drop
- CVE-2021-21108: Use after free in media
- CVE-2021-21109: Use after free in payments
- CVE-2021-21110: Use after free in safe browsing
- CVE-2021-21111: Insufficient policy enforcement in WebUI
- CVE-2021-21112: Use after free in Blink
- CVE-2021-21113: Heap buffer overflow in Skia
- CVE-2020-16043: Insufficient data validation in networking
- CVE-2021-21114: Use after free in audio
- CVE-2020-15995: Out of bounds write in V8
- CVE-2021-21115: Use after free in safe browsing
- CVE-2021-21116: Heap buffer overflow in audio
-
Use main URLs instead of redirects in master preferences
This update was imported from the openSUSE:Leap:15.2:Update update project.
- Record
openSUSE-SU-2021:0048-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0138-1 No score
Security update for opera
This update for opera fixes the following issues:
-
Update to version 73.0.3856.344
- CHR-8265 Update chromium on desktop-stable-87-3856 to 87.0.4280.141
- DNA-90625 [Mac] Crash at opera::TabView:: GetPaintData(opera::TabState) const
- DNA-90735 Crash at opera::BrowserSidebarModel::GetItemVisible (opera::BrowserSidebarItem const*) const
- DNA-90780 Crash at extensions::CommandService::GetExtension ActionCommand(std::__1::basic_string const&, extensions:: ActionInfo::Type, extensions::CommandService::QueryType, extensions::Command*, bool*)
- DNA-90821 Crash at opera::BrowserSidebarController:: Action(opera::BrowserSidebarItem const*, opera::BrowserSidebarItemContentView*)
-
The update to chromium 87.0.4280.141 fixes following issues: CVE-2021-21106, CVE-2021-21107, CVE-2021-21108, CVE-2021-21109, CVE-2021-21110, CVE-2021-21111, CVE-2021-21112, CVE-2021-21113, CVE-2020-16043, CVE-2021-21114, CVE-2020-15995, CVE-2021-21115, CVE-2021-21116
-
Update to version 73.0.3856.329
- DNA-89156 Crash at content::RenderViewHostImpl::OnFocus()
- DNA-89731 [Mac] Bookmarks bar overlaps Babe section when hovering the OMenu
- DNA-90189 Music service portal logotypes are blurred on Win
- DNA-90336 add session data schema
- DNA-90399 Address bar dropdown suggestions overlap each other
- DNA-90520 Crash at absl::raw_logging_internal::RawLog(absl:: LogSeverity, char const*, int, char const*, …)
- DNA-90538 Crash at extensions::CommandService:: GetExtensionActionCommand(std::__1::basic_string const&, extensions::ActionInfo::Type, extensions::CommandService:: QueryType, extensions::Command*, bool*)
- DNA-90600 Don’t report workspace visibility, when functionality is disabled.
- DNA-90665 Collect music service statistics WP2
- DNA-90773 Bad translation from english to spanish in UI
- DNA-90789 Crash at opera::ThumbnailHelper::RunNextRequest()
- Record
openSUSE-SU-2021:0138-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0139-1 No score
Security update for opera
This update for opera fixes the following issues:
-
Update to version 73.0.3856.344
- CHR-8265 Update chromium on desktop-stable-87-3856 to 87.0.4280.141
- DNA-90625 [Mac] Crash at opera::TabView:: GetPaintData(opera::TabState) const
- DNA-90735 Crash at opera::BrowserSidebarModel::GetItemVisible (opera::BrowserSidebarItem const*) const
- DNA-90780 Crash at extensions::CommandService::GetExtension ActionCommand(std::__1::basic_string const&, extensions:: ActionInfo::Type, extensions::CommandService::QueryType, extensions::Command*, bool*)
- DNA-90821 Crash at opera::BrowserSidebarController:: Action(opera::BrowserSidebarItem const*, opera::BrowserSidebarItemContentView*)
-
The update to chromium 87.0.4280.141 fixes following issues: CVE-2021-21106, CVE-2021-21107, CVE-2021-21108, CVE-2021-21109, CVE-2021-21110, CVE-2021-21111, CVE-2021-21112, CVE-2021-21113, CVE-2020-16043, CVE-2021-21114, CVE-2020-15995, CVE-2021-21115, CVE-2021-21116
-
Update to version 73.0.3856.329
- DNA-89156 Crash at content::RenderViewHostImpl::OnFocus()
- DNA-89731 [Mac] Bookmarks bar overlaps Babe section when hovering the OMenu
- DNA-90189 Music service portal logotypes are blurred on Win
- DNA-90336 add session data schema
- DNA-90399 Address bar dropdown suggestions overlap each other
- DNA-90520 Crash at absl::raw_logging_internal::RawLog(absl:: LogSeverity, char const*, int, char const*, …)
- DNA-90538 Crash at extensions::CommandService:: GetExtensionActionCommand(std::__1::basic_string const&, extensions::ActionInfo::Type, extensions::CommandService:: QueryType, extensions::Command*, bool*)
- DNA-90600 Don’t report workspace visibility, when functionality is disabled.
- DNA-90665 Collect music service statistics WP2
- DNA-90773 Bad translation from english to spanish in UI
- DNA-90789 Crash at opera::ThumbnailHelper::RunNextRequest()
- Record
openSUSE-SU-2021:0139-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 87.0.4280.141-0.1 | 87.0.4280.141-0.1 |
chromiumDebian:13 |
before 87.0.4280.141-0.1 | 87.0.4280.141-0.1 |
chromiumDebian:14 |
before 87.0.4280.141-0.1 | 87.0.4280.141-0.1 |
chromiumDebian:10 From an advisory covering 13 CVEs |
before 87.0.4280.141-0.1~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 44 moreShow less76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.108-178.0.3904.108-1~deb10u178.0.3904.87-178.0.3904.97-178.0.3904.97-1~deb10u179.0.3945.130-179.0.3945.130-1~deb10u179.0.3945.130-279.0.3945.56-179.0.3945.79-180.0.3987.106-180.0.3987.116-180.0.3987.122-180.0.3987.122-280.0.3987.132-180.0.3987.132-1~deb10u180.0.3987.149-180.0.3987.149-1~deb10u180.0.3987.162-180.0.3987.162-1~deb10u181.0.4044.62-181.0.4044.92-183.0.4103.106-183.0.4103.116-183.0.4103.116-1~deb10u183.0.4103.116-1~deb10u283.0.4103.116-1~deb10u383.0.4103.116-283.0.4103.116-383.0.4103.116-3.183.0.4103.83-184.0.4147.105-184.0.4147.89-187.0.4280.88-0.187.0.4280.88-0.287.0.4280.88-0.387.0.4280.88-0.487.0.4280.88-0.4~deb10u1 |
87.0.4280.141-0.1~deb10u1 |
chromium-browserUbuntu:16.04:LTS |
before 89.0.4389.82-0ubuntu0.16.04.1, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
89.0.4389.82-0ubuntu0.16.04.1 |
chromium-browserUbuntu:18.04:LTS |
before 89.0.4389.82-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 44 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.1 |
89.0.4389.82-0ubuntu0.18.04.1 |
chromiumopenSUSE:Leap 15.2 From an advisory covering 13 CVEs |
before 87.0.4280.141-lp152.2.60.1 | 87.0.4280.141-lp152.2.60.1 |
chromiumopenSUSE:Leap 15.1 From an advisory covering 13 CVEs |
before 87.0.4280.141-lp151.2.165.1 | 87.0.4280.141-lp151.2.165.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 13 CVEs |
before 87.0.4280.141-bp151.3.150.1 | 87.0.4280.141-bp151.3.150.1 |
chromiumSUSE:Package Hub 15 SP2 From an advisory covering 13 CVEs |
before 87.0.4280.141-bp152.2.47.1 | 87.0.4280.141-bp152.2.47.1 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
operaopenSUSE:Leap 15.1 NonFree From an advisory covering 13 CVEs |
before 73.0.3856.344-lp151.2.42.1 | 73.0.3856.344-lp151.2.42.1 |
operaopenSUSE:Leap 15.2 NonFree From an advisory covering 13 CVEs |
before 73.0.3856.344-lp152.2.30.1 | 73.0.3856.344-lp152.2.30.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-21111 is a critical vulnerability (CVSS 9.6) in Google Chrome, published January 8, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.08%, the 65th percentile. Fixed in chromium 87.0.4280.141-0.1.
References
chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
crbug.com/1149125
security.gentoo.org/glsa/202101-05
debian.org/security/2021/dsa-4832
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2021-21111
github.com/advisories/GHSA-543r-2767-7774
security-tracker.debian.org/tracker/CVE-2021-21111
ubuntu.com/security/CVE-2021-21111
cve.org/CVERecord?id=CVE-2021-21111
lists.opensuse.org/archives/list/[email protected]/thread/6P57LOOIW2OJU7P7J5KL7C2XT5WWY2YT
bugzilla.suse.com/1180645
suse.com/security/cve/CVE-2020-15995
This page doesn't list everything
Left out here: 19 versions and 2,130 references. The JSON record has them.