CVE-2021-21193

A use-after-free vulnerability in Google Chromium Blink allowed remote attackers to exploit heap corruption via crafted HTML pages, affecting multiple Chromium-based browsers.

This vulnerability was actively exploited in the wild (KEV) and could lead to remote code execution, posing a severe risk to organizations relying on Chromium-based browsers. DIBs must ensure their browsers are patched immediately, as unpatched instances could be leveraged for ransomware or data exfiltration. The failure highlights the critical need for timely patch management of widely deployed software components.

Shame score — The vulnerability was actively exploited in the wild and affected multiple widely used browsers, indicating a significant gap in patch management and exposure to remote attackers.