CVE-2021-21186
CVE-2021-21186
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.
CVSS 4.3 · Medium · EPSS 1.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
chrome
- Versions
- ≥ unspecified, < 89.0.4389.72: Affected (custom)
Update to 89.0.4389.72
chromium Debian:12
- Affected ranges
- ECOSYSTEM: < 89.0.4389.82-1
Update to 89.0.4389.82-1
chromium Debian:13
- Affected ranges
- ECOSYSTEM: < 89.0.4389.82-1
Update to 89.0.4389.82-1
chromium Debian:14
- Affected ranges
- ECOSYSTEM: < 89.0.4389.82-1
Update to 89.0.4389.82-1
chromium-browser Ubuntu:16.04:LTS
- Versions
- 45.0.2454.101-0ubuntu1.1201
- 47.0.2526.73-0ubuntu1.1218
- 47.0.2526.106-0ubuntu1.1221
- 48.0.2564.82-0ubuntu1.1222
- 48.0.2564.116-0ubuntu1.1229
- 49.0.2623.87-0ubuntu1.1232
- 49.0.2623.108-0ubuntu1.1233
- 50.0.2661.102-0ubuntu0.16.04.1.1237
- 51.0.2704.79-0ubuntu0.16.04.1.1242
- 52.0.2743.116-0ubuntu0.16.04.1.1250
- 53.0.2785.143-0ubuntu0.16.04.1.1254
- 53.0.2785.143-0ubuntu0.16.04.1.1257
- 55.0.2883.87-0ubuntu0.16.04.1263
- 56.0.2924.76-0ubuntu0.16.04.1268
- 57.0.2987.98-0ubuntu0.16.04.1276
- 58.0.3029.81-0ubuntu0.16.04.1277
- 58.0.3029.96-0ubuntu0.16.04.1279
- 58.0.3029.110-0ubuntu0.16.04.1281
- 59.0.3071.109-0ubuntu0.16.04.1289
- 59.0.3071.109-0ubuntu0.16.04.1291
- 60.0.3112.78-0ubuntu0.16.04.1293
- 60.0.3112.113-0ubuntu0.16.04.1298
- 61.0.3163.79-0ubuntu0.16.04.1300
- 61.0.3163.100-0ubuntu0.16.04.1306
- 62.0.3202.62-0ubuntu0.16.04.1308
- 62.0.3202.75-0ubuntu0.16.04.1313
- 62.0.3202.89-0ubuntu0.16.04.1315
- 62.0.3202.94-0ubuntu0.16.04.1317
- 63.0.3239.84-0ubuntu0.16.04.1
- 63.0.3239.132-0ubuntu0.16.04.1
- 64.0.3282.119-0ubuntu0.16.04.1
- 64.0.3282.140-0ubuntu0.16.04.1
- 64.0.3282.167-0ubuntu0.16.04.1
- 65.0.3325.181-0ubuntu0.16.04.1
- 66.0.3359.139-0ubuntu0.16.04.3
- 66.0.3359.181-0ubuntu0.16.04.1
- 67.0.3396.99-0ubuntu0.16.04.2
- 68.0.3440.75-0ubuntu0.16.04.1
- 68.0.3440.106-0ubuntu0.16.04.1
- 69.0.3497.81-0ubuntu0.16.04.1
- 70.0.3538.67-0ubuntu0.16.04.1
- 70.0.3538.77-0ubuntu0.16.04.1
- 70.0.3538.110-0ubuntu0.16.04.1
- 71.0.3578.80-0ubuntu0.16.04.1
- 71.0.3578.98-0ubuntu0.16.04.1
- 72.0.3626.119-0ubuntu0.16.04.1
- 72.0.3626.121-0ubuntu0.16.04.1
- 73.0.3683.75-0ubuntu0.16.04.1
- 73.0.3683.86-0ubuntu0.16.04.1
- 74.0.3729.169-0ubuntu0.16.04.1
- 76.0.3809.87-0ubuntu0.16.04.1
- 76.0.3809.100-0ubuntu0.16.04.1
- 77.0.3865.90-0ubuntu0.16.04.1
- 78.0.3904.70-0ubuntu0.16.04.2
- 78.0.3904.97-0ubuntu0.16.04.1
- 78.0.3904.108-0ubuntu0.16.04.1
- 79.0.3945.79-0ubuntu0.16.04.1
- 79.0.3945.130-0ubuntu0.16.04.1
- 80.0.3987.87-0ubuntu0.16.04.1
- 80.0.3987.149-0ubuntu0.16.04.1
- 80.0.3987.163-0ubuntu0.16.04.1
- 81.0.4044.122-0ubuntu0.16.04.1
- 81.0.4044.138-0ubuntu0.16.04.1
- 84.0.4147.105-0ubuntu0.16.04.1
- 85.0.4183.83-0ubuntu0.16.04.2
- 85.0.4183.121-0ubuntu0.16.04.1
- 86.0.4240.75-0ubuntu0.16.04.1
- 86.0.4240.198-0ubuntu0.16.04.1
- 87.0.4280.66-0ubuntu0.16.04.1
- Affected ranges
- ECOSYSTEM: < 89.0.4389.82-0ubuntu0.16.04.1
Update to 89.0.4389.82-0ubuntu0.16.04.1
chromium-browser Ubuntu:18.04:LTS
- Versions
- 61.0.3163.100-0ubuntu1.1378
- 62.0.3202.62-0ubuntu0.17.10.1380
- 62.0.3202.89-0ubuntu1.1386
- 62.0.3202.94-0ubuntu1.1388
- 63.0.3239.84-0ubuntu1
- 63.0.3239.108-0ubuntu1
- 64.0.3282.119-0ubuntu1
- 64.0.3282.140-0ubuntu1
- 64.0.3282.167-0ubuntu1
- 65.0.3325.146-0ubuntu1
- 65.0.3325.181-0ubuntu1
- 66.0.3359.139-0ubuntu0.18.04.3
- 66.0.3359.181-0ubuntu0.18.04.1
- 67.0.3396.99-0ubuntu0.18.04.1
- 68.0.3440.75-0ubuntu0.18.04.1
- 68.0.3440.106-0ubuntu0.18.04.1
- 69.0.3497.81-0ubuntu0.18.04.1
- 70.0.3538.67-0ubuntu0.18.04.1
- 70.0.3538.77-0ubuntu0.18.04.1
- 70.0.3538.110-0ubuntu0.18.04.1
- 71.0.3578.80-0ubuntu0.18.04.1
- 71.0.3578.98-0ubuntu0.18.04.1
- 72.0.3626.119-0ubuntu0.18.04.1
- 72.0.3626.121-0ubuntu0.18.04.1
- 73.0.3683.75-0ubuntu0.18.04.1
- 73.0.3683.86-0ubuntu0.18.04.1
- 74.0.3729.169-0ubuntu0.18.04.1
- 75.0.3770.90-0ubuntu0.18.04.1
- 75.0.3770.142-0ubuntu0.18.04.1
- 76.0.3809.87-0ubuntu0.18.04.1
- 76.0.3809.100-0ubuntu0.18.04.1
- 77.0.3865.90-0ubuntu0.18.04.1
- 78.0.3904.70-0ubuntu0.18.04.2
- 78.0.3904.97-0ubuntu0.18.04.1
- 78.0.3904.108-0ubuntu0.18.04.1
- 79.0.3945.79-0ubuntu0.18.04.1
- 79.0.3945.130-0ubuntu0.18.04.1
- 80.0.3987.87-0ubuntu0.18.04.1
- 80.0.3987.149-0ubuntu0.18.04.1
- 80.0.3987.163-0ubuntu0.18.04.1
- 81.0.4044.122-0ubuntu0.18.04.1
- 81.0.4044.138-0ubuntu0.18.04.1
- 83.0.4103.61-0ubuntu0.18.04.1
- 84.0.4147.105-0ubuntu0.18.04.1
- 85.0.4183.83-0ubuntu0.18.04.2
- 85.0.4183.121-0ubuntu0.18.04.1
- 86.0.4240.75-0ubuntu0.18.04.1
- 86.0.4240.198-0ubuntu0.18.04.1
- 87.0.4280.66-0ubuntu0.18.04.1
- Affected ranges
- ECOSYSTEM: < 89.0.4389.82-0ubuntu0.18.04.1
Update to 89.0.4389.82-0ubuntu0.18.04.1
Original sources
- https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html
- https://crbug.com/1153445
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/
- https://www.debian.org/security/2021/dsa-4886
- https://security.gentoo.org/glsa/202104-08
- https://nvd.nist.gov/vuln/detail/CVE-2021-21186