CVE-2021-21189

CVE-2021-21189 is a policy-enforcement vulnerability in the Chromium/Chromium-based browser payments component, allowing navigation/policy bypass via a crafted HTML page in versions prior to 89.0.4389.72. Public documents confirm the issue affects Chromium’s payments logic and that upstream fixes...

CVE-2021-21189

Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2021-21189

Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

CVE-2021-21186

CVE-2021-21186 refers to a policy-enforcement error in the QR scanning component of the Chromium/Chrome stack on iOS, allowing a user who is coaxed into scanning a crafted QR code to bypass navigation restrictions. Affected product: Google Chrome (iOS) with Chromium QR scan integration prior to 8...

CVE-2021-21185

CVE-2021-21185 affects the Chromium browser (Extensions component) with a policy enforcement issue that could allow a user-targeted attacker who lures a user into installing a malicious extension to exfiltrate sensitive information. The Debian advisories list this CVE among multiple Chromium fixe...

CVE-2021-21185

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension...

CVE-2021-21185

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension...

CVE-2021-21186

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code...

CVE-2021-21186

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code...

CVE-2021-21185

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension...

CVE-2021-21186

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code...

CVE-2021-21185

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension...

CVE-2021-21182

CVE-2021-21182 affects Google Chrome/Chromium navigations: insufficient policy enforcement in navigations allows a renderer-compromised remote attacker to bypass navigation restrictions via a crafted HTML page, for Chrome/Chromium fixes before/at 89.0.4389.72. Connected advisories (Debian Arch/DS...

CVE-2021-21182

Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page...

CVE-2021-21182

Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page...

CVE-2021-21182

Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page...

CVE-2021-21177

CVE-2021-21177 is a policy enforcement error in Chrome/Chromium Autofill (prior to 89.0.4389.72). Insufficient policy enforcement could allow a remote attacker to exfiltrate potentially sensitive memory contents via a crafted HTML page. Affected component: Autofill in the Chromium browser; root c...

CVE-2021-21177

Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

CVE-2021-21177

Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

CVE-2021-21177

Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...