Every CVE Search/ Get API key

CVE-2021-21148

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to...

8.8 HighIn KEVPublic exploitFix available

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

20.0%Up 19.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
CVE-2021-21148
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
CVE-2021-21148
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2021-8539 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
EUVD-2021-8539
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-6675-f3rx-hqr9 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to...

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
GHSA-6675-f3rx-hqr9
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CISA KEV No score

Google Chromium V8 Heap Buffer Overflow Vulnerability

Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Record
CVE-2021-21148
Weakness
CWE-122
Updated
2026-11-02
OSVALPINE-CVE-2021-21148 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
ALPINE-CVE-2021-21148
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
Show 15 moreShow less
OSVBELL-CVE-2021-21148 8.8

CVE-2021-21148 does not affect BellSoft software

Record
BELL-CVE-2021-21148
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
CVE-2021-21148
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2021-21148 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
DEBIAN-CVE-2021-21148
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-21148 8.8

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Record
UBUNTU-CVE-2021-21148
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2021-0406 No score

Updated qtwebengine5 packages fix security vulnerabilities

Updated qtwebengine5 packages fix security vulnerabilities:

The qtwebengine5 package has been updated to version 5.15.5, fixing several security issues in the bundled chromium code.

Record
MGASA-2021-0406
Updated
2026-11-02
OSVopenSUSE-SU-2021:0267-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Update to 88.0.4324.150 boo#1181827

  • CVE-2021-21148: Heap buffer overflow in V8
Record
openSUSE-SU-2021:0267-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0276-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Update to 88.0.4324.150 boo#1181827

  • CVE-2021-21148: Heap buffer overflow in V8

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:0276-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0296-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to version 74.0.3911.107
    • CHR-8311 Update chromium on desktop-stable-88-3911 to 88.0.4324.150
    • DNA-90329 Implement client_capabilities negotiation for Flow / Sync
    • DNA-90560 [Search Tabs] Open Tabs On Top
    • DNA-90620 Add opauto tests for tab snoozing
    • DNA-90628 Update opauto tests after design changes
    • DNA-90818 Only 3 recently closed tabs are shown in a search mode
    • DNA-90911 Enable search-tabs-open-tabs-on-top on developer
    • DNA-90990 Crash at opera::AddressBarView::NotifyBoundsChanged()
    • DNA-90991 Opera doesn’t show version and ‘Relaunch’ button despite update is ready
    • DNA-91097 Crash at extensions::BrowserSidebarPrivateGetPremium ExtensionsInfoFunction::Run()
    • DNA-91163 [Win] “URL navigation filters” subpage doesn’t react on actions
    • DNA-91196 [Flow] Device capabilities is not properly saved in Local State
    • DNA-91276 Sidebar setup wont open
  • The update to chromium 88.0.4324.150 fixes following issues:
    • CVE-2021-21148 (1181827)
Record
openSUSE-SU-2021:0296-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0413-1 No score

Security update for opera

This update for opera fixes the following issues:

  • Update to version 74.0.3911.203
    • CHR-8324 Update chromium on desktop-stable-88-3911 to 88.0.4324.182(boo#1182358)
    • DNA-90762 Replace “Don’t show again” with “Discard”
    • DNA-90974 Crash at opera::PersistentRecentlyClosedWindows::GetEntryType(SessionID)
    • DNA-91289 [Search tabs] Wrong tab stays highlighted after removing another tab
    • DNA-91476 Invalid memory dereference PlayerServiceBrowsertest
    • DNA-91502 Change system name on opera://about page for MacOS
    • DNA-91740 Missing title in Extensions Toolbar Menu
  • The update to chromium 88.0.4324.182 fixes following issues: CVE-2021-21149, CVE-2021-21150, CVE-2021-21151, CVE-2021-21152, CVE-2021-21153, CVE-2021-21154, CVE-2021-21155, CVE-2021-21156, CVE-2021-21157
  • Update to version 74.0.3911.160
    • DNA-90409 Cleanup Javascript dialogs: app modal & tab modal
    • DNA-90720 [Search Tabs] Allow discarding recently closed items
    • DNA-90802 [Windows] Debug fails on linking
    • DNA-91130 heap-use-after-free in CashbackBackendServiceTest.AutoUpdateSchedule
    • DNA-91152 Allow reading agent variables in trigger conditions
    • DNA-91225 [Search tabs] The webpage doesn’t move from “Open tabs” to “Recently closed” section
    • DNA-91243 Add Rich Hint support for the cashback badge and popup
    • DNA-91483 component_unittests are timing out
    • DNA-91516 Sidebar setup opens only with cashback enabled
    • DNA-91601 No text in 1st line of address bar dropdown suggestions
    • DNA-91603 Jumbo build problem on desktop-stable-88-3911
Record
openSUSE-SU-2021:0413-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:0973-1 No score

Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues:

Update to version 5.15.3

CVE fixes backported in chromium updates:

  • CVE-2020-16044: Use after free in WebRTC
  • CVE-2021-21118: Heap buffer overflow in Blink
  • CVE-2021-21119: Use after free in Media
  • CVE-2021-21120: Use after free in WebSQL
  • CVE-2021-21121: Use after free in Omnibox
  • CVE-2021-21122: Use after free in Blink
  • CVE-2021-21123: Insufficient data validation in File System API
  • CVE-2021-21125: Insufficient policy enforcement in File System API
  • CVE-2021-21126: Insufficient policy enforcement in extensions
  • CVE-2021-21127: Insufficient policy enforcement in extensions
  • CVE-2021-21128: Heap buffer overflow in Blink
  • CVE-2021-21129: Insufficient policy enforcement in File System API
  • CVE-2021-21130: Insufficient policy enforcement in File System API
  • CVE-2021-21131: Insufficient policy enforcement in File System API
  • CVE-2021-21132: Inappropriate implementation in DevTools
  • CVE-2021-21135: Inappropriate implementation in Performance API
  • CVE-2021-21137: Inappropriate implementation in DevTools
  • CVE-2021-21140: Uninitialized Use in USB
  • CVE-2021-21141: Insufficient policy enforcement in File System API
  • CVE-2021-21145: Use after free in Fonts
  • CVE-2021-21146: Use after free in Navigation
  • CVE-2021-21147: Inappropriate implementation in Skia
  • CVE-2021-21148: Heap buffer overflow in V8
  • CVE-2021-21149: Stack overflow in Data Transfer
  • CVE-2021-21150: Use after free in Downloads
  • CVE-2021-21152: Heap buffer overflow in Media
  • CVE-2021-21153: Stack overflow in GPU Process
  • CVE-2021-21156: Heap buffer overflow in V8
  • CVE-2021-21157: Use after free in Web Sockets
Record
openSUSE-SU-2021:0973-1
Updated
2026-11-02
OSVopenSUSE-SU-2021:1016-1 No score

Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues:

Update to version 5.15.3

CVE fixes backported in chromium updates:

  • CVE-2020-16044: Use after free in WebRTC
  • CVE-2021-21118: Heap buffer overflow in Blink
  • CVE-2021-21119: Use after free in Media
  • CVE-2021-21120: Use after free in WebSQL
  • CVE-2021-21121: Use after free in Omnibox
  • CVE-2021-21122: Use after free in Blink
  • CVE-2021-21123: Insufficient data validation in File System API
  • CVE-2021-21125: Insufficient policy enforcement in File System API
  • CVE-2021-21126: Insufficient policy enforcement in extensions
  • CVE-2021-21127: Insufficient policy enforcement in extensions
  • CVE-2021-21128: Heap buffer overflow in Blink
  • CVE-2021-21129: Insufficient policy enforcement in File System API
  • CVE-2021-21130: Insufficient policy enforcement in File System API
  • CVE-2021-21131: Insufficient policy enforcement in File System API
  • CVE-2021-21132: Inappropriate implementation in DevTools
  • CVE-2021-21135: Inappropriate implementation in Performance API
  • CVE-2021-21137: Inappropriate implementation in DevTools
  • CVE-2021-21140: Uninitialized Use in USB
  • CVE-2021-21141: Insufficient policy enforcement in File System API
  • CVE-2021-21145: Use after free in Fonts
  • CVE-2021-21146: Use after free in Navigation
  • CVE-2021-21147: Inappropriate implementation in Skia
  • CVE-2021-21148: Heap buffer overflow in V8
  • CVE-2021-21149: Stack overflow in Data Transfer
  • CVE-2021-21150: Use after free in Downloads
  • CVE-2021-21152: Heap buffer overflow in Media
  • CVE-2021-21153: Stack overflow in GPU Process
  • CVE-2021-21156: Heap buffer overflow in V8
  • CVE-2021-21157: Use after free in Web Sockets

This update was imported from the openSUSE:Leap:15.2:Update update project.

Record
openSUSE-SU-2021:1016-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score

chromedriver-93.0.4577.82-1.1 on GA media

These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10681-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10977-1 No score

libQt5Pdf5-5.15.6-2.1 on GA media

These are all security issues fixed in the libQt5Pdf5-5.15.6-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10977-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11096-1 No score

nodejs14-14.17.5-1.2 on GA media

These are all security issues fixed in the nodejs14-14.17.5-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11096-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
nodejs
Alpine:v3.13
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.14
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.15
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.16
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.17
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.18
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.19
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.20
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.21
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.22
 before 14.15.5-r0
14.15.5-r0
Show 28 moreShow less
Affected packages
PackageAffectedFixed
nodejs
Alpine:v3.23
 before 14.15.5-r0
14.15.5-r0
nodejs
Alpine:v3.24
 before 14.15.5-r0
14.15.5-r0
qt5-qtwebengine
Alpine:v3.14
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.15
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.16
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.17
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.18
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.19
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.20
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.21
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.22
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
qt5-qtwebengine
Alpine:v3.23
 before 5.15.3_git20200401-r0
5.15.3_git20200401-r0
chromium
Debian:12
 before 88.0.4324.150-1
88.0.4324.150-1
chromium
Debian:13
 before 88.0.4324.150-1
88.0.4324.150-1
chromium
Debian:14
 before 88.0.4324.150-1
88.0.4324.150-1
chromium
Debian:10
From an advisory covering 10 CVEs
 before 88.0.4324.182-1~deb10u1, plus listed versions
73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1
Show 45 moreShow less
76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.108-178.0.3904.108-1~deb10u178.0.3904.87-178.0.3904.97-178.0.3904.97-1~deb10u179.0.3945.130-179.0.3945.130-1~deb10u179.0.3945.130-279.0.3945.56-179.0.3945.79-180.0.3987.106-180.0.3987.116-180.0.3987.122-180.0.3987.122-280.0.3987.132-180.0.3987.132-1~deb10u180.0.3987.149-180.0.3987.149-1~deb10u180.0.3987.162-180.0.3987.162-1~deb10u181.0.4044.62-181.0.4044.92-183.0.4103.106-183.0.4103.116-183.0.4103.116-1~deb10u183.0.4103.116-1~deb10u283.0.4103.116-1~deb10u383.0.4103.116-283.0.4103.116-383.0.4103.116-3.183.0.4103.83-184.0.4147.105-184.0.4147.89-187.0.4280.141-0.187.0.4280.141-0.1~deb10u187.0.4280.88-0.187.0.4280.88-0.287.0.4280.88-0.387.0.4280.88-0.4
88.0.4324.182-1~deb10u1
qtwebengine5
Mageia:8
From an advisory covering 29 CVEs
 before 5.15.5-1.mga8
5.15.5-1.mga8
chromium-browser
Ubuntu:16.04:LTS
 before 89.0.4389.82-0ubuntu0.16.04.1, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 45 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1
89.0.4389.82-0ubuntu0.16.04.1
chromium-browser
Ubuntu:18.04:LTS
 before 89.0.4389.82-0ubuntu0.18.04.1, plus listed versions
61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1
Show 44 moreShow less
63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.186.0.4240.198-0ubuntu0.18.04.187.0.4280.66-0ubuntu0.18.04.1
89.0.4389.82-0ubuntu0.18.04.1
chromium
openSUSE:Leap 15.2
 before 88.0.4324.150-lp152.2.72.1
88.0.4324.150-lp152.2.72.1
chromium
SUSE:Package Hub 15 SP2
 before 88.0.4324.150-bp152.2.59.1
88.0.4324.150-bp152.2.59.1
opera
openSUSE:Leap 15.2 NonFree
 before 74.0.3911.107-lp152.2.34.1
74.0.3911.107-lp152.2.34.1
opera
openSUSE:Leap 15.2 NonFree
From an advisory covering 10 CVEs
 before 74.0.3911.203-lp152.2.37.1
74.0.3911.203-lp152.2.37.1
libqt5-qtwebengine
openSUSE:Leap 15.2
From an advisory covering 29 CVEs
 before 5.15.3-lp152.3.3.4
5.15.3-lp152.3.3.4
libqt5-qtwebengine
SUSE:Package Hub 15 SP2
From an advisory covering 29 CVEs
 before 5.15.3-bp152.3.3.1
5.15.3-bp152.3.3.1
chromium
openSUSE:Tumbleweed
From an advisory covering 1081 CVEs
 before 93.0.4577.82-1.1
93.0.4577.82-1.1
nodejs14
openSUSE:Tumbleweed
From an advisory covering 19 CVEs
 before 14.17.5-1.2
14.17.5-1.2
chromium
openSUSE:Tumbleweed
From an advisory covering 2310 CVEs
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubGrayhaxor/CVE-2021-211482021-02-07

History

History
RecordedChangedSources
affected
exploitation
affectedOSV
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-21148 is a high vulnerability (CVSS 8.8) in Google Chrome, published February 9, 2021. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 20.0%, the 97th percentile. Fixed in nodejs 14.15.5-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 26 versions and 2,162 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open