CVE-2021-37973 Google Chromium Portals
Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.
- CVSS
- not scored
On CISA’s exploited list
Google Chromium Portals Use-After-Free Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2021-11-17
- Ransomware use
- not known