CVE-2021-21220

A remote attacker could exploit heap corruption via a crafted HTML page in Google Chromium V8 to execute arbitrary code.

This improper input validation vulnerability in the Chromium V8 engine allows remote code execution through heap corruption, affecting major browsers like Chrome and Edge. DIB organizations must ensure their browsers are patched immediately, as this KEV-listed flaw was actively exploited in the wild and represents a severe compliance risk under NIST 800-171 for unpatched software.

Shame score — A critical RCE flaw in a foundational browser engine was actively exploited in the wild and listed in CISA's KEV catalog, indicating severe negligence in patching and vulnerability management.