Every CVE Search/ Get API key

CVE-2021-21149

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a...

8.8 HighFix available

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.47%Up 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
CVE-2021-21149
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
CVE-2021-21149
Updated
2026-11-02
EUVDEUVD-2021-8540 No score

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
EUVD-2021-8540
Updated
2026-11-03
GitHub AdvisoriesGHSA-75r7-qc22-8qcg No score

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a...

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
GHSA-75r7-qc22-8qcg
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2021-21149 8.8

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
ALPINE-CVE-2021-21149
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 8.8

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
CVE-2021-21149
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2021-21149 8.8

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
DEBIAN-CVE-2021-21149
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-21149 8.8

Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Record
UBUNTU-CVE-2021-21149
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2021-0406 No score

Updated qtwebengine5 packages fix security vulnerabilities

Updated qtwebengine5 packages fix security vulnerabilities:

The qtwebengine5 package has been updated to version 5.15.5, fixing several security issues in the bundled chromium code.

Record
MGASA-2021-0406
Updated
2026-11-02
OSVopenSUSE-SU-2021:0392-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Update to 89.0.4389.72 (boo#1182358, boo#1182960):

  • CVE-2021-21159: Heap buffer overflow in TabStrip.
  • CVE-2021-21160: Heap buffer overflow in WebAudio.
  • CVE-2021-21161: Heap buffer overflow in TabStrip.
  • CVE-2021-21162: Use after free in WebRTC.
  • CVE-2021-21163: Insufficient data validation in Reader Mode.
  • CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  • CVE-2021-21165: Object lifecycle issue in audio.
  • CVE-2021-21166: Object lifecycle issue in audio.
  • CVE-2021-21167: Use after free in bookmarks.
  • CVE-2021-21168: Insufficient policy enforcement in appcache.
  • CVE-2021-21169: Out of bounds memory access in V8.
  • CVE-2021-21170: Incorrect security UI in Loader.
  • CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  • CVE-2021-21172: Insufficient policy enforcement in File System API.
  • CVE-2021-21173: Side-channel information leakage in Network Internals.
  • CVE-2021-21174: Inappropriate implementation in Referrer.
  • CVE-2021-21175: Inappropriate implementation in Site isolation.
  • CVE-2021-21176: Inappropriate implementation in full screen mode.
  • CVE-2021-21177: Insufficient policy enforcement in Autofill.
  • CVE-2021-21178: Inappropriate implementation in Compositing.
  • CVE-2021-21179: Use after free in Network Internals.
  • CVE-2021-21180: Use after free in tab search.
  • CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  • CVE-2021-21181: Side-channel information leakage in autofill.
  • CVE-2021-21182: Insufficient policy enforcement in navigations.
  • CVE-2021-21183: Inappropriate implementation in performance APIs.
  • CVE-2021-21184: Inappropriate implementation in performance APIs.
  • CVE-2021-21185: Insufficient policy enforcement in extensions.
  • CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  • CVE-2021-21187: Insufficient data validation in URL formatting.
  • CVE-2021-21188: Use after free in Blink.
  • CVE-2021-21189: Insufficient policy enforcement in payments.
  • CVE-2021-21190: Uninitialized Use in PDFium.
  • CVE-2021-21149: Stack overflow in Data Transfer.
  • CVE-2021-21150: Use after free in Downloads.
  • CVE-2021-21151: Use after free in Payments.
  • CVE-2021-21152: Heap buffer overflow in Media.
  • CVE-2021-21153: Stack overflow in GPU Process.
  • CVE-2021-21154: Heap buffer overflow in Tab Strip.
  • CVE-2021-21155: Heap buffer overflow in Tab Strip.
  • CVE-2021-21156: Heap buffer overflow in V8.
  • CVE-2021-21157: Use after free in Web Sockets.
  • Fixed Sandbox with glibc 2.33 (boo#1182233)
  • Fixed an issue where chromium hangs on opening (boo#1182775).
Record
openSUSE-SU-2021:0392-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0401-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Update to 89.0.4389.72 (boo#1182358, boo#1182960):

  • CVE-2021-21159: Heap buffer overflow in TabStrip.
  • CVE-2021-21160: Heap buffer overflow in WebAudio.
  • CVE-2021-21161: Heap buffer overflow in TabStrip.
  • CVE-2021-21162: Use after free in WebRTC.
  • CVE-2021-21163: Insufficient data validation in Reader Mode.
  • CVE-2021-21164: Insufficient data validation in Chrome for iOS.
  • CVE-2021-21165: Object lifecycle issue in audio.
  • CVE-2021-21166: Object lifecycle issue in audio.
  • CVE-2021-21167: Use after free in bookmarks.
  • CVE-2021-21168: Insufficient policy enforcement in appcache.
  • CVE-2021-21169: Out of bounds memory access in V8.
  • CVE-2021-21170: Incorrect security UI in Loader.
  • CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
  • CVE-2021-21172: Insufficient policy enforcement in File System API.
  • CVE-2021-21173: Side-channel information leakage in Network Internals.
  • CVE-2021-21174: Inappropriate implementation in Referrer.
  • CVE-2021-21175: Inappropriate implementation in Site isolation.
  • CVE-2021-21176: Inappropriate implementation in full screen mode.
  • CVE-2021-21177: Insufficient policy enforcement in Autofill.
  • CVE-2021-21178: Inappropriate implementation in Compositing.
  • CVE-2021-21179: Use after free in Network Internals.
  • CVE-2021-21180: Use after free in tab search.
  • CVE-2020-27844: Heap buffer overflow in OpenJPEG.
  • CVE-2021-21181: Side-channel information leakage in autofill.
  • CVE-2021-21182: Insufficient policy enforcement in navigations.
  • CVE-2021-21183: Inappropriate implementation in performance APIs.
  • CVE-2021-21184: Inappropriate implementation in performance APIs.
  • CVE-2021-21185: Insufficient policy enforcement in extensions.
  • CVE-2021-21186: Insufficient policy enforcement in QR scanning.
  • CVE-2021-21187: Insufficient data validation in URL formatting.
  • CVE-2021-21188: Use after free in Blink.
  • CVE-2021-21189: Insufficient policy enforcement in payments.
  • CVE-2021-21190: Uninitialized Use in PDFium.
  • CVE-2021-21149: Stack overflow in Data Transfer.
  • CVE-2021-21150: Use after free in Downloads.
  • CVE-2021-21151: Use after free in Payments.
  • CVE-2021-21152: Heap buffer overflow in Media.
  • CVE-2021-21153: Stack overflow in GPU Process.
  • CVE-2021-21154: Heap buffer overflow in Tab Strip.
  • CVE-2021-21155: Heap buffer overflow in Tab Strip.
  • CVE-2021-21156: Heap buffer overflow in V8.
  • CVE-2021-21157: Use after free in Web Sockets.
  • Fixed Sandbox with glibc 2.33 (boo#1182233)
  • Fixed an issue where chromium hangs on opening (boo#1182775).

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:0401-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0413-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to version 74.0.3911.203
    • CHR-8324 Update chromium on desktop-stable-88-3911 to 88.0.4324.182(boo#1182358)
    • DNA-90762 Replace “Don’t show again” with “Discard”
    • DNA-90974 Crash at opera::PersistentRecentlyClosedWindows::GetEntryType(SessionID)
    • DNA-91289 [Search tabs] Wrong tab stays highlighted after removing another tab
    • DNA-91476 Invalid memory dereference PlayerServiceBrowsertest
    • DNA-91502 Change system name on opera://about page for MacOS
    • DNA-91740 Missing title in Extensions Toolbar Menu
  • The update to chromium 88.0.4324.182 fixes following issues: CVE-2021-21149, CVE-2021-21150, CVE-2021-21151, CVE-2021-21152, CVE-2021-21153, CVE-2021-21154, CVE-2021-21155, CVE-2021-21156, CVE-2021-21157
  • Update to version 74.0.3911.160
    • DNA-90409 Cleanup Javascript dialogs: app modal & tab modal
    • DNA-90720 [Search Tabs] Allow discarding recently closed items
    • DNA-90802 [Windows] Debug fails on linking
    • DNA-91130 heap-use-after-free in CashbackBackendServiceTest.AutoUpdateSchedule
    • DNA-91152 Allow reading agent variables in trigger conditions
    • DNA-91225 [Search tabs] The webpage doesn’t move from “Open tabs” to “Recently closed” section
    • DNA-91243 Add Rich Hint support for the cashback badge and popup
    • DNA-91483 component_unittests are timing out
    • DNA-91516 Sidebar setup opens only with cashback enabled
    • DNA-91601 No text in 1st line of address bar dropdown suggestions
    • DNA-91603 Jumbo build problem on desktop-stable-88-3911
Record
openSUSE-SU-2021:0413-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0973-1 No score

Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues:

Update to version 5.15.3

CVE fixes backported in chromium updates:

  • CVE-2020-16044: Use after free in WebRTC
  • CVE-2021-21118: Heap buffer overflow in Blink
  • CVE-2021-21119: Use after free in Media
  • CVE-2021-21120: Use after free in WebSQL
  • CVE-2021-21121: Use after free in Omnibox
  • CVE-2021-21122: Use after free in Blink
  • CVE-2021-21123: Insufficient data validation in File System API
  • CVE-2021-21125: Insufficient policy enforcement in File System API
  • CVE-2021-21126: Insufficient policy enforcement in extensions
  • CVE-2021-21127: Insufficient policy enforcement in extensions
  • CVE-2021-21128: Heap buffer overflow in Blink
  • CVE-2021-21129: Insufficient policy enforcement in File System API
  • CVE-2021-21130: Insufficient policy enforcement in File System API
  • CVE-2021-21131: Insufficient policy enforcement in File System API
  • CVE-2021-21132: Inappropriate implementation in DevTools
  • CVE-2021-21135: Inappropriate implementation in Performance API
  • CVE-2021-21137: Inappropriate implementation in DevTools
  • CVE-2021-21140: Uninitialized Use in USB
  • CVE-2021-21141: Insufficient policy enforcement in File System API
  • CVE-2021-21145: Use after free in Fonts
  • CVE-2021-21146: Use after free in Navigation
  • CVE-2021-21147: Inappropriate implementation in Skia
  • CVE-2021-21148: Heap buffer overflow in V8
  • CVE-2021-21149: Stack overflow in Data Transfer
  • CVE-2021-21150: Use after free in Downloads
  • CVE-2021-21152: Heap buffer overflow in Media
  • CVE-2021-21153: Stack overflow in GPU Process
  • CVE-2021-21156: Heap buffer overflow in V8
  • CVE-2021-21157: Use after free in Web Sockets
Record
openSUSE-SU-2021:0973-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1016-1 No score

Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues:

Update to version 5.15.3

CVE fixes backported in chromium updates:

  • CVE-2020-16044: Use after free in WebRTC
  • CVE-2021-21118: Heap buffer overflow in Blink
  • CVE-2021-21119: Use after free in Media
  • CVE-2021-21120: Use after free in WebSQL
  • CVE-2021-21121: Use after free in Omnibox
  • CVE-2021-21122: Use after free in Blink
  • CVE-2021-21123: Insufficient data validation in File System API
  • CVE-2021-21125: Insufficient policy enforcement in File System API
  • CVE-2021-21126: Insufficient policy enforcement in extensions
  • CVE-2021-21127: Insufficient policy enforcement in extensions
  • CVE-2021-21128: Heap buffer overflow in Blink
  • CVE-2021-21129: Insufficient policy enforcement in File System API
  • CVE-2021-21130: Insufficient policy enforcement in File System API
  • CVE-2021-21131: Insufficient policy enforcement in File System API
  • CVE-2021-21132: Inappropriate implementation in DevTools
  • CVE-2021-21135: Inappropriate implementation in Performance API
  • CVE-2021-21137: Inappropriate implementation in DevTools
  • CVE-2021-21140: Uninitialized Use in USB
  • CVE-2021-21141: Insufficient policy enforcement in File System API
  • CVE-2021-21145: Use after free in Fonts
  • CVE-2021-21146: Use after free in Navigation
  • CVE-2021-21147: Inappropriate implementation in Skia
  • CVE-2021-21148: Heap buffer overflow in V8
  • CVE-2021-21149: Stack overflow in Data Transfer
  • CVE-2021-21150: Use after free in Downloads
  • CVE-2021-21152: Heap buffer overflow in Media
  • CVE-2021-21153: Stack overflow in GPU Process
  • CVE-2021-21156: Heap buffer overflow in V8
  • CVE-2021-21157: Use after free in Web Sockets

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:1016-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10681-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10977-1 No score

libQt5Pdf5-5.15.6-2.1 on GA media

These are all security issues fixed in the libQt5Pdf5-5.15.6-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10977-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
qt5-qtwebengine
Alpine:v3.14
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.15
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.16
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.17
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.18
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.19
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.20
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.21
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.22
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.23
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
Show 14 moreShow less
Affected packages
PackageAffectedFixed
chromium
Debian:12
 before 88.0.4324.182-1
88.0.4324.182-1
chromium
Debian:13
 before 88.0.4324.182-1
88.0.4324.182-1
chromium
Debian:14
 before 88.0.4324.182-1
88.0.4324.182-1
chromium
Debian:10
From an advisory covering 10 CVEs
 before 88.0.4324.182-1~deb10u1, plus listed versions
73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1
Show 45 moreShow less
76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.108-178.0.3904.108-1~deb10u178.0.3904.87-178.0.3904.97-178.0.3904.97-1~deb10u179.0.3945.130-179.0.3945.130-1~deb10u179.0.3945.130-279.0.3945.56-179.0.3945.79-180.0.3987.106-180.0.3987.116-180.0.3987.122-180.0.3987.122-280.0.3987.132-180.0.3987.132-1~deb10u180.0.3987.149-180.0.3987.149-1~deb10u180.0.3987.162-180.0.3987.162-1~deb10u181.0.4044.62-181.0.4044.92-183.0.4103.106-183.0.4103.116-183.0.4103.116-1~deb10u183.0.4103.116-1~deb10u283.0.4103.116-1~deb10u383.0.4103.116-283.0.4103.116-383.0.4103.116-3.183.0.4103.83-184.0.4147.105-184.0.4147.89-187.0.4280.141-0.187.0.4280.141-0.1~deb10u187.0.4280.88-0.187.0.4280.88-0.287.0.4280.88-0.387.0.4280.88-0.4
88.0.4324.182-1~deb10u1
qtwebengine5
Mageia:8
From an advisory covering 29 CVEs
 before 5.15.5-1.mga8
5.15.5-1.mga8
chromium-browser
Ubuntu:16.04:LTS
 before 89.0.4389.82-0ubuntu0.16.04.1, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 45 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1
89.0.4389.82-0ubuntu0.16.04.1
chromium-browser
Ubuntu:18.04:LTS
 before 89.0.4389.82-0ubuntu0.18.04.1, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 44 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.1
89.0.4389.82-0ubuntu0.18.04.1
chromium
openSUSE:Leap 15.2
From an advisory covering 42 CVEs
 before 89.0.4389.72-lp152.2.77.1
89.0.4389.72-lp152.2.77.1
chromium
SUSE:Package Hub 15 SP2
From an advisory covering 42 CVEs
 before 89.0.4389.72-bp152.2.62.1
89.0.4389.72-bp152.2.62.1
opera
openSUSE:Leap 15.2 NonFree
From an advisory covering 10 CVEs
 before 74.0.3911.203-lp152.2.37.1
74.0.3911.203-lp152.2.37.1
libqt5-qtwebengine
openSUSE:Leap 15.2
From an advisory covering 29 CVEs
 before 5.15.3-lp152.3.3.4
5.15.3-lp152.3.3.4
libqt5-qtwebengine
SUSE:Package Hub 15 SP2
From an advisory covering 29 CVEs
 before 5.15.3-bp152.3.3.1
5.15.3-bp152.3.3.1
chromium
openSUSE:Tumbleweed
From an advisory covering 1081 CVEs
 before 93.0.4577.82-1.1
93.0.4577.82-1.1
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-21149 is a high vulnerability (CVSS 8.8) in Google Chrome, published February 19, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in qt5-qtwebengine 5.15.3_git20200401-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 26 versions and 2,138 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open