VDB

CVE-2021-21163

CVE-2021-21163 PUBLISHED KEV

Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server.

EPSS 0.94% · 57.6th percentile

Risk Scores

EPSS Score
0.94%
57.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSchromium-browser81.0.4044.122-0ubuntu0.16.04.1, 62.0.3202.75-0ubuntu0.16.04.1313, 62.0.3202.89-0ubuntu0.16.04.1315
Ubuntu:18.04:LTSchromium-browser62.0.3202.89-0ubuntu1.1386, 63.0.3239.84-0ubuntu1, 64.0.3282.119-0ubuntu1

Timeline

  • Mar 3, 2021 PoC Published
  • Mar 4, 2021 CVE Published
  • Mar 10, 2021 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Jul 15, 2021 PoC Published
  • Jul 15, 2021 PoC Published
  • Aug 24, 2021 EPSS Score
  • Oct 26, 2021 EPSS Score
  • Nov 8, 2021 PoC Published
  • Nov 20, 2021 PoC Published
  • Feb 4, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›