CVE-2021-21224

Published Apr 26, 2021 CVSS 3.1 · 8.8 High EPSS 84.2% KEV · Listed
Description
Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-4906-1 chromium security update
History
Type Values Removed Values Added
Metrics kev

{'dateAdded': '2021-11-03'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Oct 21, 2025, 11:25 PM
Reserved
Dec 21, 2020, 12:00 AM
Status
Analyzed
Published
Apr 26, 2021, 5:15 PM
Modified
Jun 17, 2026, 3:35 AM