Lucene search

K
cvelistChromeCVELIST:CVE-2021-21164
HistoryMar 09, 2021 - 5:46 p.m.

CVE-2021-21164

2021-03-0917:46:12
Chrome
www.cve.org
8
cve-2021-21164
chrome
ios
data validation
remote attacker
cross-origin data

AI Score

6.5

Confidence

High

EPSS

0.004

Percentile

74.2%

Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CNA Affected

[
  {
    "product": "Chrome",
    "vendor": "Google",
    "versions": [
      {
        "lessThan": "89.0.4389.72",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]