CVE-2021-4098

Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Score

CVSS 3.1 7.4 High

Status

Modified - chrome-cve-admin@google.com

Published

2022-02-11

Last modified

2024-08-03

Weaknesses

CWE-367, CWE-787

Affected products

• Chrome (Google)

References

• https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html
• https://crbug.com/1263457