CVE-2021-21153
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a...
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
8.8
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
CVE-2021-21153- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
CVE-2021-21153- Updated
- 2026-11-02
EUVDEUVD-2021-8544 No score
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
EUVD-2021-8544- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g2v3-g2fw-7467 No score
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a...
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
GHSA-g2v3-g2fw-7467- Weakness
- CWE-787
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-21153
8.8
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
ALPINE-CVE-2021-21153- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
8.8
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
CVE-2021-21153- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2021-21153
8.8
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
DEBIAN-CVE-2021-21153- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-21153
8.8
Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
- Record
UBUNTU-CVE-2021-21153- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2021-0406 No score
Updated qtwebengine5 packages fix security vulnerabilities
Updated qtwebengine5 packages fix security vulnerabilities:
The qtwebengine5 package has been updated to version 5.15.5, fixing several security issues in the bundled chromium code.
- Record
MGASA-2021-0406- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0392-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 89.0.4389.72 (boo#1182358, boo#1182960):
- CVE-2021-21159: Heap buffer overflow in TabStrip.
- CVE-2021-21160: Heap buffer overflow in WebAudio.
- CVE-2021-21161: Heap buffer overflow in TabStrip.
- CVE-2021-21162: Use after free in WebRTC.
- CVE-2021-21163: Insufficient data validation in Reader Mode.
- CVE-2021-21164: Insufficient data validation in Chrome for iOS.
- CVE-2021-21165: Object lifecycle issue in audio.
- CVE-2021-21166: Object lifecycle issue in audio.
- CVE-2021-21167: Use after free in bookmarks.
- CVE-2021-21168: Insufficient policy enforcement in appcache.
- CVE-2021-21169: Out of bounds memory access in V8.
- CVE-2021-21170: Incorrect security UI in Loader.
- CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
- CVE-2021-21172: Insufficient policy enforcement in File System API.
- CVE-2021-21173: Side-channel information leakage in Network Internals.
- CVE-2021-21174: Inappropriate implementation in Referrer.
- CVE-2021-21175: Inappropriate implementation in Site isolation.
- CVE-2021-21176: Inappropriate implementation in full screen mode.
- CVE-2021-21177: Insufficient policy enforcement in Autofill.
- CVE-2021-21178: Inappropriate implementation in Compositing.
- CVE-2021-21179: Use after free in Network Internals.
- CVE-2021-21180: Use after free in tab search.
- CVE-2020-27844: Heap buffer overflow in OpenJPEG.
- CVE-2021-21181: Side-channel information leakage in autofill.
- CVE-2021-21182: Insufficient policy enforcement in navigations.
- CVE-2021-21183: Inappropriate implementation in performance APIs.
- CVE-2021-21184: Inappropriate implementation in performance APIs.
- CVE-2021-21185: Insufficient policy enforcement in extensions.
- CVE-2021-21186: Insufficient policy enforcement in QR scanning.
- CVE-2021-21187: Insufficient data validation in URL formatting.
- CVE-2021-21188: Use after free in Blink.
- CVE-2021-21189: Insufficient policy enforcement in payments.
- CVE-2021-21190: Uninitialized Use in PDFium.
- CVE-2021-21149: Stack overflow in Data Transfer.
- CVE-2021-21150: Use after free in Downloads.
- CVE-2021-21151: Use after free in Payments.
- CVE-2021-21152: Heap buffer overflow in Media.
- CVE-2021-21153: Stack overflow in GPU Process.
- CVE-2021-21154: Heap buffer overflow in Tab Strip.
- CVE-2021-21155: Heap buffer overflow in Tab Strip.
- CVE-2021-21156: Heap buffer overflow in V8.
- CVE-2021-21157: Use after free in Web Sockets.
- Fixed Sandbox with glibc 2.33 (boo#1182233)
- Fixed an issue where chromium hangs on opening (boo#1182775).
- Record
openSUSE-SU-2021:0392-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0401-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 89.0.4389.72 (boo#1182358, boo#1182960):
- CVE-2021-21159: Heap buffer overflow in TabStrip.
- CVE-2021-21160: Heap buffer overflow in WebAudio.
- CVE-2021-21161: Heap buffer overflow in TabStrip.
- CVE-2021-21162: Use after free in WebRTC.
- CVE-2021-21163: Insufficient data validation in Reader Mode.
- CVE-2021-21164: Insufficient data validation in Chrome for iOS.
- CVE-2021-21165: Object lifecycle issue in audio.
- CVE-2021-21166: Object lifecycle issue in audio.
- CVE-2021-21167: Use after free in bookmarks.
- CVE-2021-21168: Insufficient policy enforcement in appcache.
- CVE-2021-21169: Out of bounds memory access in V8.
- CVE-2021-21170: Incorrect security UI in Loader.
- CVE-2021-21171: Incorrect security UI in TabStrip and Navigation.
- CVE-2021-21172: Insufficient policy enforcement in File System API.
- CVE-2021-21173: Side-channel information leakage in Network Internals.
- CVE-2021-21174: Inappropriate implementation in Referrer.
- CVE-2021-21175: Inappropriate implementation in Site isolation.
- CVE-2021-21176: Inappropriate implementation in full screen mode.
- CVE-2021-21177: Insufficient policy enforcement in Autofill.
- CVE-2021-21178: Inappropriate implementation in Compositing.
- CVE-2021-21179: Use after free in Network Internals.
- CVE-2021-21180: Use after free in tab search.
- CVE-2020-27844: Heap buffer overflow in OpenJPEG.
- CVE-2021-21181: Side-channel information leakage in autofill.
- CVE-2021-21182: Insufficient policy enforcement in navigations.
- CVE-2021-21183: Inappropriate implementation in performance APIs.
- CVE-2021-21184: Inappropriate implementation in performance APIs.
- CVE-2021-21185: Insufficient policy enforcement in extensions.
- CVE-2021-21186: Insufficient policy enforcement in QR scanning.
- CVE-2021-21187: Insufficient data validation in URL formatting.
- CVE-2021-21188: Use after free in Blink.
- CVE-2021-21189: Insufficient policy enforcement in payments.
- CVE-2021-21190: Uninitialized Use in PDFium.
- CVE-2021-21149: Stack overflow in Data Transfer.
- CVE-2021-21150: Use after free in Downloads.
- CVE-2021-21151: Use after free in Payments.
- CVE-2021-21152: Heap buffer overflow in Media.
- CVE-2021-21153: Stack overflow in GPU Process.
- CVE-2021-21154: Heap buffer overflow in Tab Strip.
- CVE-2021-21155: Heap buffer overflow in Tab Strip.
- CVE-2021-21156: Heap buffer overflow in V8.
- CVE-2021-21157: Use after free in Web Sockets.
- Fixed Sandbox with glibc 2.33 (boo#1182233)
- Fixed an issue where chromium hangs on opening (boo#1182775).
This update was imported from the openSUSE:Leap:15.2:Update update project.
- Record
openSUSE-SU-2021:0401-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0413-1 No score
Security update for opera
This update for opera fixes the following issues:
- Update to version 74.0.3911.203
- CHR-8324 Update chromium on desktop-stable-88-3911 to 88.0.4324.182(boo#1182358)
- DNA-90762 Replace “Don’t show again” with “Discard”
- DNA-90974 Crash at opera::PersistentRecentlyClosedWindows::GetEntryType(SessionID)
- DNA-91289 [Search tabs] Wrong tab stays highlighted after removing another tab
- DNA-91476 Invalid memory dereference PlayerServiceBrowsertest
- DNA-91502 Change system name on opera://about page for MacOS
- DNA-91740 Missing title in Extensions Toolbar Menu
- The update to chromium 88.0.4324.182 fixes following issues: CVE-2021-21149, CVE-2021-21150, CVE-2021-21151, CVE-2021-21152, CVE-2021-21153, CVE-2021-21154, CVE-2021-21155, CVE-2021-21156, CVE-2021-21157
- Update to version 74.0.3911.160
- DNA-90409 Cleanup Javascript dialogs: app modal & tab modal
- DNA-90720 [Search Tabs] Allow discarding recently closed items
- DNA-90802 [Windows] Debug fails on linking
- DNA-91130 heap-use-after-free in CashbackBackendServiceTest.AutoUpdateSchedule
- DNA-91152 Allow reading agent variables in trigger conditions
- DNA-91225 [Search tabs] The webpage doesn’t move from “Open tabs” to “Recently closed” section
- DNA-91243 Add Rich Hint support for the cashback badge and popup
- DNA-91483 component_unittests are timing out
- DNA-91516 Sidebar setup opens only with cashback enabled
- DNA-91601 No text in 1st line of address bar dropdown suggestions
- DNA-91603 Jumbo build problem on desktop-stable-88-3911
- Record
openSUSE-SU-2021:0413-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:0973-1 No score
Security update for libqt5-qtwebengine
This update for libqt5-qtwebengine fixes the following issues:
Update to version 5.15.3
CVE fixes backported in chromium updates:
- CVE-2020-16044: Use after free in WebRTC
- CVE-2021-21118: Heap buffer overflow in Blink
- CVE-2021-21119: Use after free in Media
- CVE-2021-21120: Use after free in WebSQL
- CVE-2021-21121: Use after free in Omnibox
- CVE-2021-21122: Use after free in Blink
- CVE-2021-21123: Insufficient data validation in File System API
- CVE-2021-21125: Insufficient policy enforcement in File System API
- CVE-2021-21126: Insufficient policy enforcement in extensions
- CVE-2021-21127: Insufficient policy enforcement in extensions
- CVE-2021-21128: Heap buffer overflow in Blink
- CVE-2021-21129: Insufficient policy enforcement in File System API
- CVE-2021-21130: Insufficient policy enforcement in File System API
- CVE-2021-21131: Insufficient policy enforcement in File System API
- CVE-2021-21132: Inappropriate implementation in DevTools
- CVE-2021-21135: Inappropriate implementation in Performance API
- CVE-2021-21137: Inappropriate implementation in DevTools
- CVE-2021-21140: Uninitialized Use in USB
- CVE-2021-21141: Insufficient policy enforcement in File System API
- CVE-2021-21145: Use after free in Fonts
- CVE-2021-21146: Use after free in Navigation
- CVE-2021-21147: Inappropriate implementation in Skia
- CVE-2021-21148: Heap buffer overflow in V8
- CVE-2021-21149: Stack overflow in Data Transfer
- CVE-2021-21150: Use after free in Downloads
- CVE-2021-21152: Heap buffer overflow in Media
- CVE-2021-21153: Stack overflow in GPU Process
- CVE-2021-21156: Heap buffer overflow in V8
- CVE-2021-21157: Use after free in Web Sockets
- Record
openSUSE-SU-2021:0973-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2021:1016-1 No score
Security update for libqt5-qtwebengine
This update for libqt5-qtwebengine fixes the following issues:
Update to version 5.15.3
CVE fixes backported in chromium updates:
- CVE-2020-16044: Use after free in WebRTC
- CVE-2021-21118: Heap buffer overflow in Blink
- CVE-2021-21119: Use after free in Media
- CVE-2021-21120: Use after free in WebSQL
- CVE-2021-21121: Use after free in Omnibox
- CVE-2021-21122: Use after free in Blink
- CVE-2021-21123: Insufficient data validation in File System API
- CVE-2021-21125: Insufficient policy enforcement in File System API
- CVE-2021-21126: Insufficient policy enforcement in extensions
- CVE-2021-21127: Insufficient policy enforcement in extensions
- CVE-2021-21128: Heap buffer overflow in Blink
- CVE-2021-21129: Insufficient policy enforcement in File System API
- CVE-2021-21130: Insufficient policy enforcement in File System API
- CVE-2021-21131: Insufficient policy enforcement in File System API
- CVE-2021-21132: Inappropriate implementation in DevTools
- CVE-2021-21135: Inappropriate implementation in Performance API
- CVE-2021-21137: Inappropriate implementation in DevTools
- CVE-2021-21140: Uninitialized Use in USB
- CVE-2021-21141: Insufficient policy enforcement in File System API
- CVE-2021-21145: Use after free in Fonts
- CVE-2021-21146: Use after free in Navigation
- CVE-2021-21147: Inappropriate implementation in Skia
- CVE-2021-21148: Heap buffer overflow in V8
- CVE-2021-21149: Stack overflow in Data Transfer
- CVE-2021-21150: Use after free in Downloads
- CVE-2021-21152: Heap buffer overflow in Media
- CVE-2021-21153: Stack overflow in GPU Process
- CVE-2021-21156: Heap buffer overflow in V8
- CVE-2021-21157: Use after free in Web Sockets
This update was imported from the openSUSE:Leap:15.2:Update update project.
- Record
openSUSE-SU-2021:1016-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10977-1 No score
libQt5Pdf5-5.15.6-2.1 on GA media
These are all security issues fixed in the libQt5Pdf5-5.15.6-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10977-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qt5-qtwebengineAlpine:v3.14 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.15 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.16 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.17 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.18 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.19 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.20 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.21 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.22 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
qt5-qtwebengineAlpine:v3.23 |
before 5.15.3_git20200401-r0 | 5.15.3_git20200401-r0 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 88.0.4324.182-1 | 88.0.4324.182-1 |
chromiumDebian:13 |
before 88.0.4324.182-1 | 88.0.4324.182-1 |
chromiumDebian:14 |
before 88.0.4324.182-1 | 88.0.4324.182-1 |
chromiumDebian:10 From an advisory covering 10 CVEs |
before 88.0.4324.182-1~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 45 moreShow less76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.108-178.0.3904.108-1~deb10u178.0.3904.87-178.0.3904.97-178.0.3904.97-1~deb10u179.0.3945.130-179.0.3945.130-1~deb10u179.0.3945.130-279.0.3945.56-179.0.3945.79-180.0.3987.106-180.0.3987.116-180.0.3987.122-180.0.3987.122-280.0.3987.132-180.0.3987.132-1~deb10u180.0.3987.149-180.0.3987.149-1~deb10u180.0.3987.162-180.0.3987.162-1~deb10u181.0.4044.62-181.0.4044.92-183.0.4103.106-183.0.4103.116-183.0.4103.116-1~deb10u183.0.4103.116-1~deb10u283.0.4103.116-1~deb10u383.0.4103.116-283.0.4103.116-383.0.4103.116-3.183.0.4103.83-184.0.4147.105-184.0.4147.89-187.0.4280.141-0.187.0.4280.141-0.1~deb10u187.0.4280.88-0.187.0.4280.88-0.287.0.4280.88-0.387.0.4280.88-0.4 |
88.0.4324.182-1~deb10u1 |
qtwebengine5Mageia:8 From an advisory covering 29 CVEs |
before 5.15.5-1.mga8 | 5.15.5-1.mga8 |
chromium-browserUbuntu:16.04:LTS |
before 89.0.4389.82-0ubuntu0.16.04.1, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
89.0.4389.82-0ubuntu0.16.04.1 |
chromium-browserUbuntu:18.04:LTS |
before 89.0.4389.82-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 44 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.1 |
89.0.4389.82-0ubuntu0.18.04.1 |
chromiumopenSUSE:Leap 15.2 From an advisory covering 42 CVEs |
before 89.0.4389.72-lp152.2.77.1 | 89.0.4389.72-lp152.2.77.1 |
chromiumSUSE:Package Hub 15 SP2 From an advisory covering 42 CVEs |
before 89.0.4389.72-bp152.2.62.1 | 89.0.4389.72-bp152.2.62.1 |
operaopenSUSE:Leap 15.2 NonFree From an advisory covering 10 CVEs |
before 74.0.3911.203-lp152.2.37.1 | 74.0.3911.203-lp152.2.37.1 |
libqt5-qtwebengineopenSUSE:Leap 15.2 From an advisory covering 29 CVEs |
before 5.15.3-lp152.3.3.4 | 5.15.3-lp152.3.3.4 |
libqt5-qtwebengineSUSE:Package Hub 15 SP2 From an advisory covering 29 CVEs |
before 5.15.3-bp152.3.3.1 | 5.15.3-bp152.3.3.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-21153 is a high vulnerability (CVSS 8.8) in Google Chrome, published February 19, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.27%, the 70th percentile. Fixed in qt5-qtwebengine 5.15.3_git20200401-r0.
References
chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html
crbug.com/1155974
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX
security.gentoo.org/glsa/202104-08
nvd.nist.gov/vuln/detail/CVE-2021-21153
Show 194 moreShow less
lists.fedoraproject.org/archives/list/[email protected]/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB
lists.fedoraproject.org/archives/list/[email protected]/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX
github.com/advisories/GHSA-g2v3-g2fw-7467
security.alpinelinux.org/vuln/CVE-2021-21153
security-tracker.debian.org/tracker/CVE-2021-21153
advisories.mageia.org/MGASA-2021-0406.html
bugs.mageia.org/show_bug.cgi?id=29249
lists.opensuse.org/archives/list/[email protected]/thread/5TAIJROLXEDDASYPE5FNK2OGKN4IAJT5
ubuntu.com/security/CVE-2021-21153
cve.org/CVERecord?id=CVE-2021-21153
lists.opensuse.org/archives/list/[email protected]/thread/S66YPMC4VLRMKQGSTL3XFAVYDCVH7ADY
bugzilla.suse.com/1182233
bugzilla.suse.com/1182358
bugzilla.suse.com/1182775
suse.com/security/cve/CVE-2020-27844
suse.com/security/cve/CVE-2021-21149
suse.com/security/cve/CVE-2021-21150
suse.com/security/cve/CVE-2021-21151
suse.com/security/cve/CVE-2021-21152
suse.com/security/cve/CVE-2021-21153
suse.com/security/cve/CVE-2021-21154
suse.com/security/cve/CVE-2021-21155
suse.com/security/cve/CVE-2021-21156
suse.com/security/cve/CVE-2021-21157
suse.com/security/cve/CVE-2021-21159
suse.com/security/cve/CVE-2021-21160
suse.com/security/cve/CVE-2021-21161
suse.com/security/cve/CVE-2021-21162
suse.com/security/cve/CVE-2021-21163
suse.com/security/cve/CVE-2021-21164
suse.com/security/cve/CVE-2021-21165
suse.com/security/cve/CVE-2021-21166
suse.com/security/cve/CVE-2021-21167
suse.com/security/cve/CVE-2021-21168
suse.com/security/cve/CVE-2021-21169
suse.com/security/cve/CVE-2021-21170
suse.com/security/cve/CVE-2021-21171
suse.com/security/cve/CVE-2021-21172
suse.com/security/cve/CVE-2021-21173
suse.com/security/cve/CVE-2021-21174
suse.com/security/cve/CVE-2021-21175
suse.com/security/cve/CVE-2021-21176
suse.com/security/cve/CVE-2021-21177
suse.com/security/cve/CVE-2021-21178
suse.com/security/cve/CVE-2021-21179
suse.com/security/cve/CVE-2021-21180
suse.com/security/cve/CVE-2021-21181
suse.com/security/cve/CVE-2021-21182
suse.com/security/cve/CVE-2021-21183
suse.com/security/cve/CVE-2021-21184
suse.com/security/cve/CVE-2021-21185
suse.com/security/cve/CVE-2021-21186
suse.com/security/cve/CVE-2021-21187
suse.com/security/cve/CVE-2021-21188
suse.com/security/cve/CVE-2021-21189
suse.com/security/cve/CVE-2021-21190
lists.opensuse.org/archives/list/[email protected]/thread/F5HQTB6OX4JN5OFGWK6KZIS4UD7TGBXF
lists.opensuse.org/archives/list/[email protected]/thread/NFEMB66XHIEXP6VOOQ4JIXBD6U5X4EIA
suse.com/security/cve/CVE-2021-21148
bugzilla.suse.com/1130395
bugzilla.suse.com/1158516
bugzilla.suse.com/1163744
bugzilla.suse.com/1163766
suse.com/security/cve/CVE-2020-16044
suse.com/security/cve/CVE-2021-21118
suse.com/security/cve/CVE-2021-21119
suse.com/security/cve/CVE-2021-21120
suse.com/security/cve/CVE-2021-21121
suse.com/security/cve/CVE-2021-21122
suse.com/security/cve/CVE-2021-21123
suse.com/security/cve/CVE-2021-21125
suse.com/security/cve/CVE-2021-21126
suse.com/security/cve/CVE-2021-21127
suse.com/security/cve/CVE-2021-21128
suse.com/security/cve/CVE-2021-21129
suse.com/security/cve/CVE-2021-21130
suse.com/security/cve/CVE-2021-21131
suse.com/security/cve/CVE-2021-21132
suse.com/security/cve/CVE-2021-21135
suse.com/security/cve/CVE-2021-21137
suse.com/security/cve/CVE-2021-21140
suse.com/security/cve/CVE-2021-21141
suse.com/security/cve/CVE-2021-21145
suse.com/security/cve/CVE-2021-21146
suse.com/security/cve/CVE-2021-21147
lists.opensuse.org/archives/list/[email protected]/thread/FA7FANKJNI72BRIWJCZ3TLBXXZJS7GLL
suse.com/security/cve/CVE-2017-11215
suse.com/security/cve/CVE-2017-11225
suse.com/security/cve/CVE-2017-15386
suse.com/security/cve/CVE-2017-15387
suse.com/security/cve/CVE-2017-15388
suse.com/security/cve/CVE-2017-15389
suse.com/security/cve/CVE-2017-15390
suse.com/security/cve/CVE-2017-15391
suse.com/security/cve/CVE-2017-15392
suse.com/security/cve/CVE-2017-15393
suse.com/security/cve/CVE-2017-15394
suse.com/security/cve/CVE-2017-15395
suse.com/security/cve/CVE-2017-15396
suse.com/security/cve/CVE-2017-15398
suse.com/security/cve/CVE-2017-15399
suse.com/security/cve/CVE-2017-15407
suse.com/security/cve/CVE-2017-15408
suse.com/security/cve/CVE-2017-15409
suse.com/security/cve/CVE-2017-15410
suse.com/security/cve/CVE-2017-15411
suse.com/security/cve/CVE-2017-15412
suse.com/security/cve/CVE-2017-15413
suse.com/security/cve/CVE-2017-15415
suse.com/security/cve/CVE-2017-15416
suse.com/security/cve/CVE-2017-15417
suse.com/security/cve/CVE-2017-15418
suse.com/security/cve/CVE-2017-15419
suse.com/security/cve/CVE-2017-15420
suse.com/security/cve/CVE-2017-15422
suse.com/security/cve/CVE-2017-15423
suse.com/security/cve/CVE-2017-15424
suse.com/security/cve/CVE-2017-15425
suse.com/security/cve/CVE-2017-15426
suse.com/security/cve/CVE-2017-15427
suse.com/security/cve/CVE-2017-15429
suse.com/security/cve/CVE-2017-15430
suse.com/security/cve/CVE-2017-5006
suse.com/security/cve/CVE-2017-5007
suse.com/security/cve/CVE-2017-5008
suse.com/security/cve/CVE-2017-5009
suse.com/security/cve/CVE-2017-5010
suse.com/security/cve/CVE-2017-5011
suse.com/security/cve/CVE-2017-5012
suse.com/security/cve/CVE-2017-5013
suse.com/security/cve/CVE-2017-5014
suse.com/security/cve/CVE-2017-5015
suse.com/security/cve/CVE-2017-5016
suse.com/security/cve/CVE-2017-5017
suse.com/security/cve/CVE-2017-5018
suse.com/security/cve/CVE-2017-5019
suse.com/security/cve/CVE-2017-5020
suse.com/security/cve/CVE-2017-5021
suse.com/security/cve/CVE-2017-5022
suse.com/security/cve/CVE-2017-5023
suse.com/security/cve/CVE-2017-5024
suse.com/security/cve/CVE-2017-5025
suse.com/security/cve/CVE-2017-5026
suse.com/security/cve/CVE-2017-5030
suse.com/security/cve/CVE-2017-5035
suse.com/security/cve/CVE-2017-5041
suse.com/security/cve/CVE-2017-5044
suse.com/security/cve/CVE-2017-5052
suse.com/security/cve/CVE-2017-5053
suse.com/security/cve/CVE-2017-5054
suse.com/security/cve/CVE-2017-5055
suse.com/security/cve/CVE-2017-5056
suse.com/security/cve/CVE-2017-5057
suse.com/security/cve/CVE-2017-5058
suse.com/security/cve/CVE-2017-5059
suse.com/security/cve/CVE-2017-5060
suse.com/security/cve/CVE-2017-5061
suse.com/security/cve/CVE-2017-5062
suse.com/security/cve/CVE-2017-5063
suse.com/security/cve/CVE-2017-5064
suse.com/security/cve/CVE-2017-5065
suse.com/security/cve/CVE-2017-5066
suse.com/security/cve/CVE-2017-5067
suse.com/security/cve/CVE-2017-5068
suse.com/security/cve/CVE-2017-5069
suse.com/security/cve/CVE-2017-5070
suse.com/security/cve/CVE-2017-5071
suse.com/security/cve/CVE-2017-5072
suse.com/security/cve/CVE-2017-5073
suse.com/security/cve/CVE-2017-5074
suse.com/security/cve/CVE-2017-5075
suse.com/security/cve/CVE-2017-5076
suse.com/security/cve/CVE-2017-5077
suse.com/security/cve/CVE-2017-5078
suse.com/security/cve/CVE-2017-5079
suse.com/security/cve/CVE-2017-5080
suse.com/security/cve/CVE-2017-5081
suse.com/security/cve/CVE-2017-5082
suse.com/security/cve/CVE-2017-5083
suse.com/security/cve/CVE-2017-5085
suse.com/security/cve/CVE-2017-5086
suse.com/security/cve/CVE-2017-5087
suse.com/security/cve/CVE-2017-5088
suse.com/security/cve/CVE-2017-5089
suse.com/security/cve/CVE-2017-5091
suse.com/security/cve/CVE-2017-5092
suse.com/security/cve/CVE-2017-5093
suse.com/security/cve/CVE-2017-5094
suse.com/security/cve/CVE-2017-5095
suse.com/security/cve/CVE-2017-5096
suse.com/security/cve/CVE-2017-5097
suse.com/security/cve/CVE-2017-5098
suse.com/security/cve/CVE-2017-5099
suse.com/security/cve/CVE-2017-5100
Left out here: 26 versions and 2,138 references. The JSON record has them.