CVE-2021-21224

HIGH KEV

Google Chrome < 90.0.4430.85 - Remote Code Execution via V8 Type Confusion

Title source: llm

Exploitation Summary

CVE-2021-21224 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 3, 2021. EIP tracks 1 public exploit.

Description

Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Exploits (1)

vulncheck_xdb NO CODE

client-side

https://github.com/maldev866/ChExp_CVE_2021_21224

View Code ZIP pw:eip

References (8)

Core 8

Core References

Release Notes x_refsource_misc

https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html

Exploit, Issue Tracking x_refsource_misc

https://crbug.com/1195777

Mailing List, Third Party Advisory vendor-advisory x_refsource_debian

https://www.debian.org/security/2021/dsa-4906

Third Party Advisory vendor-advisory x_refsource_gentoo

https://security.gentoo.org/glsa/202104-08

Release Notes vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/

Release Notes vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/

Release Notes vendor-advisory x_refsource_fedora

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/

US Government Resource

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21224

Scores

CVSS v3 8.8

EPSS 0.4791

EPSS Percentile 97.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation active

Automatable no

Technical Impact total

Details

CISA KEV 2021-11-03

VulnCheck KEV 2021-06-08

InTheWild.io 2021-04-20

ENISA EUVD EUVD-2021-8615

CWE

CWE-843

Status published

Products (5)

debian/debian_linux 10.0

fedoraproject/fedora 32

fedoraproject/fedora 33

fedoraproject/fedora 34

google/chrome < 90.0.4430.85

Published Apr 26, 2021

KEV Added Nov 03, 2021

Tracked Since Feb 18, 2026