| CVE-2021-21168 | MOYENNE6.5 | Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21167 | ÉLEVÉE8.8 | Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21166KEV | ÉLEVÉE8.8 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21165 | ÉLEVÉE8.8 | Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21164 | MOYENNE6.5 | Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21163 | MOYENNE6.5 | Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server. | 09/03/2021 |
| CVE-2021-21162 | ÉLEVÉE8.8 | Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21161 | ÉLEVÉE8.8 | Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21160 | ÉLEVÉE8.8 | Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 09/03/2021 |
| CVE-2021-21159 | ÉLEVÉE8.8 | Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 09/03/2021 |
| CVE-2020-8902 | MOYENNE4.3 | Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. An attacker can use a specially crafted webpage to force a rendertron headless chrome process to render internal sites it has access to, and display it as a screenshot. Suggested mitigations are to upgrade your render | 23/02/2021 |
| CVE-2021-21157 | ÉLEVÉE8.8 | Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 22/02/2021 |
| CVE-2021-21156 | ÉLEVÉE8.8 | Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script. | 22/02/2021 |
| CVE-2021-21155 | CRITIQUE9.6 | Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | 22/02/2021 |
| CVE-2021-21154 | CRITIQUE9.6 | Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | 22/02/2021 |
| CVE-2021-21153 | ÉLEVÉE8.8 | Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. | 22/02/2021 |
| CVE-2021-21152 | ÉLEVÉE8.8 | Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 22/02/2021 |
| CVE-2021-21151 | CRITIQUE9.6 | Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. | 22/02/2021 |
| CVE-2021-21150 | CRITIQUE9.6 | Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. | 22/02/2021 |
| CVE-2021-21149 | ÉLEVÉE8.8 | Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. | 22/02/2021 |