CVE-2021-21111

2021-01-0817:56:27

Chrome

www.cve.org

google chrome

webui

sandbox escape

policy enforcement

malicious extension

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

56.2%

JSON

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.

CNA Affected

[
  {
    "product": "Chrome",
    "vendor": "Google",
    "versions": [
      {
        "lessThan": "87.0.4280.141",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]