$ cve CVE-2021-21166 JSON

CVE-2021-21166 KEV

8.8

HIGH · CVSS 3.1 · EPSS 24% (pctl 98)

Patch first

On CISA KEV — known exploited in the wild, due 2021-11-17.

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	24.03% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-362
On CISA KEV	yes — remediate by 2021-11-17
Public exploit	none known
Published	2021-03-09
Last modified	2026-06-17

Name	Google Chromium Race Condition Vulnerability
Added	2021-11-03
Due	2021-11-17
Vendor / product	Google / Chromium
Ransomware use	none reported