CVE-2021-21148

A heap buffer overflow in Google Chromium V8 allowed remote attackers to exploit heap corruption via crafted HTML pages, affecting multiple Chromium-based browsers.

This vulnerability enabled remote code execution through a crafted HTML page, posing a severe risk to any organization relying on Chromium-based browsers like Chrome, Edge, or Opera. DIBs must ensure these browsers are patched immediately, as unpatched instances could be exploited in the wild to compromise systems and violate compliance requirements. The failure highlights the critical need for timely patch management of widely deployed software.

Shame score — A known heap buffer overflow in a widely used engine was actively exploited in the wild, demonstrating a failure to patch a critical vulnerability before it was weaponized.