CVE-2021-37973: Google Chromium Portals Use-After-Free Vulnerability.
Google Chromium Portals Use-After-Free Vulnerability. Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.
- CISA KEV-listed (remediation due 2021-11-17)
- EPSS 14.8% (94.7% percentile)