CVE-2021-37975

🗓️ 08 Oct 2021 00:00:00Reported by ChromeType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 1135 Views

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Reporter	Title	Published	Views	Family All 98
FreeBSD	chromium -- multiple vulnerabilities	30 Sep 202100:00	–	freebsd
ATTACKERKB	CVE-2021-37975	8 Oct 202100:00	–	attackerkb
AlpineLinux	CVE-2021-37975	8 Oct 202100:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в chromium	20 May 202605:53	–	astralinux
Circl	CVE-2021-37975	1 Oct 202108:56	–	circl
CISA KEV Catalog	Google Chromium V8 Use-After-Free Vulnerability	3 Nov 202100:00	–	cisa_kev
CNNVD	Google Chrome 资源管理错误漏洞	30 Sep 202100:00	–	cnnvd
CNVD	Google Chrome Post-release Reuse Vulnerability (CNVD-2021-99278)	8 Oct 202100:00	–	cnvd
Check Point Advisories	Google Chrome Heap Corruption (CVE-2021-37975)	31 Jan 202200:00	–	checkpoint_advisories
Cvelist	CVE-2021-37975	8 Oct 202100:00	–	cvelist

NVD

Vulners

Node

google chromeRange<94.0.4606.71

Node

fedoraproject fedoraMatch33

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "94.0.4606.71",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/172847/Chrome-V8-Logic-Bug-Use-After-Free.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RNARCF5HEZK7GJXZRN5TQ45AQDCRM2WO/
chromereleases	www.chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FRFXUDH46PFVE75VQVWY6PYY5DK3S2XT/
crbug	www.crbug.com/1252918
debian	www.debian.org/security/2022/dsa-5046
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D63JZ3ROXCUHP4CFWDHCPZNTGET7T34R/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

24 Oct 2025 13:55Current

8.2High risk

Vulners AI Score8.2

CVSS 26.8

CVSS 3.18.8

EPSS0.62981

SSVC