Lucene search
Veracode Vulnerability DatabaseVERACODE:28959HistoryJan 11, 2021 - 8:09 p.m.
Sandbox Restrictions Bypass
2021-01-1120:09:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
chromium
sandbox escape
vulnerability
drag and drop
remote attack
EPSS
0.006
Percentile
78.3%
chromium is vulnerable to sandbox restrictions bypass. A use-after-free in drag and drop allows a remote attacker who has compromised the renderer process to perform a sandbox escape via a malicious HTML page.
References
chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html
crbug.com/1153595
lists.fedoraproject.org/archives/list/[email protected]/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/
lists.fedoraproject.org/archives/list/[email protected]/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/
security-tracker.debian.org/tracker/CVE-2021-21107
security.gentoo.org/glsa/202101-05
www.debian.org/security/2021/dsa-4832
Related
cvelist
cvelist
CVE-2021-21107
2021-01-08 17:56:27
cve
cve
CVE-2021-21107
2021-01-08 19:15:14
prion
prion
Double free
2021-01-08 19:15:00
ubuntucve
ubuntucve
CVE-2021-21107
2021-01-08 00:00:00
debiancve
debiancve
CVE-2021-21107
2021-01-08 19:15:14
nvd
nvd
CVE-2021-21107
2021-01-08 19:15:14
freebsd
freebsd
chromium -- multiple vulnerabilities
2021-01-06 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2021-01-06 00:00:00
osv
osv
chromium - security update
2021-01-16 00:00:00
chromedriver-93.0.4577.82-1.1 on GA media
2024-06-15 00:00:00
ungoogled-chromium-113.0.5672.92-1.1 on GA media
2024-06-15 00:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2021-79926272ce)
2021-01-17 00:00:00
Debian: Security Advisory (DSA-4832-1)
2021-01-17 00:00:00
Fedora: Security Advisory for chromium (FEDORA-2021-d9faeff8eb)
2021-01-23 00:00:00
nessus
nessus
GLSA-202101-05 : Chromium, Google Chrome: Multiple vulnerabilities
2021-01-11 00:00:00
Google Chrome < 87.0.4280.141 Multiple Vulnerabilities
2021-01-06 00:00:00
suse
suse
Security update for chromium (important)
2021-01-11 00:00:00
Security update for opera (moderate)
2021-01-22 00:00:00
Security update for chromium (important)
2021-01-10 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-87.0.4280.141-1.fc33
2021-01-17 01:51:52
[SECURITY] Fedora 32 Update: chromium-87.0.4280.141-1.fc32
2021-01-23 01:30:25
debian
debian
[SECURITY] [DSA 4832-1] chromium security update
2021-01-16 14:06:35
[SECURITY] [DSA 4832-1] chromium security update
2021-01-16 14:06:35
kaspersky
kaspersky
KLA12046 Multiple vulnerabilities in Opera
2021-01-14 00:00:00
KLA12035 Multiple vulnerabilities in Google Chrome
2021-01-06 00:00:00
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2021-01-10 00:00:00
archlinux
archlinux
[ASA-202101-6] chromium: multiple issues
2021-01-08 00:00:00
[ASA-202101-20] vivaldi: multiple issues
2021-01-12 00:00:00
threatpost
threatpost
Bugs in Firefox, Chrome, Edge Allow Remote System Hijacking
2021-01-08 06:00:28
mscve
mscve
Chromium Security Updates for Microsoft Edge (Chromium-Based)
2020-01-28 08:00:00