CVE-2021-21171

MEDIO 6.5CVE-2021-21171 · Published 09/03/2021 · updated 17/06/2026

In breve

CVE-2021-21171 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda chrome (google).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.7%, superiore al 76.8% delle vulnerabilità.
Correzione: aggiornare a 89.0.4389.72 o successiva.

Package	Affected versions	Patched versions
chrome google	`< 89.0.4389.72`	`89.0.4389.72`

Description

Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

References

chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html · Release Notes
crbug.com/1152894 · Exploit
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT
security.gentoo.org/glsa/202104-08 · Third Party Advisory
debian.org/security/2021/dsa-4886 · Third Party Advisory

Altre vulnerabilità di chrome

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free