Lucene search
Veracode Vulnerability DatabaseVERACODE:28955HistoryJan 11, 2021 - 8:09 p.m.
Sandbox Restrictions Bypass
2021-01-1120:09:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
chromium
sandbox bypass
policy enforcement
webui
malicious extension
EPSS
0.002
Percentile
56.2%
chromium is vulnerable to sandbox restrictions bypass. Insufficient policy enforcement in WebUI allows an attacker who has tricked a user into installing a malicious extension to perform a sandbox escape via a malicious Chrome Extension.
References
chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
crbug.com/1149125
lists.fedoraproject.org/archives/list/[email protected]/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/
lists.fedoraproject.org/archives/list/[email protected]/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
security-tracker.debian.org/tracker/CVE-2021-21111
security.gentoo.org/glsa/202101-05
www.debian.org/security/2021/dsa-4832
Related
cvelist
cvelist
CVE-2021-21111
2021-01-08 17:56:27
prion
prion
Authorization
2021-01-08 19:15:00
nvd
nvd
CVE-2021-21111
2021-01-08 19:15:15
cve
cve
CVE-2021-21111
2021-01-08 19:15:15
ubuntucve
ubuntucve
CVE-2021-21111
2021-01-08 00:00:00
debiancve
debiancve
CVE-2021-21111
2021-01-08 19:15:15
freebsd
freebsd
chromium -- multiple vulnerabilities
2021-01-06 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2021-01-06 00:00:00
osv
osv
chromium - security update
2021-01-16 00:00:00
chromedriver-93.0.4577.82-1.1 on GA media
2024-06-15 00:00:00
ungoogled-chromium-113.0.5672.92-1.1 on GA media
2024-06-15 00:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2021-79926272ce)
2021-01-17 00:00:00
openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0041-1)
2021-04-16 00:00:00
debian
debian
[SECURITY] [DSA 4832-1] chromium security update
2021-01-16 14:06:35
[SECURITY] [DSA 4832-1] chromium security update
2021-01-16 14:06:35
kaspersky
kaspersky
KLA12046 Multiple vulnerabilities in Opera
2021-01-14 00:00:00
KLA12035 Multiple vulnerabilities in Google Chrome
2021-01-06 00:00:00
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2021-01-10 00:00:00
nessus
nessus
Fedora 32 : chromium (2021-d9faeff8eb)
2021-01-25 00:00:00
openSUSE Security Update : opera (openSUSE-2021-139)
2021-01-25 00:00:00
GLSA-202101-05 : Chromium, Google Chrome: Multiple vulnerabilities
2021-01-11 00:00:00
suse
suse
Security update for opera (moderate)
2021-01-22 00:00:00
Security update for chromium (important)
2021-01-10 00:00:00
Security update for opera (moderate)
2021-01-22 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-87.0.4280.141-1.fc33
2021-01-17 01:51:52
[SECURITY] Fedora 32 Update: chromium-87.0.4280.141-1.fc32
2021-01-23 01:30:25
archlinux
archlinux
[ASA-202101-6] chromium: multiple issues
2021-01-08 00:00:00
[ASA-202101-20] vivaldi: multiple issues
2021-01-12 00:00:00
threatpost
threatpost
Bugs in Firefox, Chrome, Edge Allow Remote System Hijacking
2021-01-08 06:00:28
mscve
mscve
Chromium Security Updates for Microsoft Edge (Chromium-Based)
2020-01-28 08:00:00