CVE-2021-21159: Heap buffer overflow in TabStrip. Reported by Khalil Zhani on
2021-01-27
CVE-2021-21160: Heap buffer overflow in WebAudio. Reported by Aleksandar
Nikolic of Cisco Talos on 2021-01-25
CVE-2021-21161: Heap buffer overflow in TabStrip. Reported by Khalil Zhani on
2021-02-02
CVE-2021-21162: Use after free in WebRTC. Reported by Anonymous on 2021-01-29
CVE-2021-21163: Insufficient data validation in Reader Mode. Reported by Alison
Huffman, Microsoft Browser Vulnerability Research on 2020-07-30
CVE-2021-21164: Insufficient data validation in Chrome for iOS. Reported by
Muneaki Nishimura (nishimunea) on 2021-01-11
CVE-2021-21165: Object lifecycle issue in audio. Reported by Alison Huffman,
Microsoft Browser Vulnerability Research on 2021-02-04
CVE-2021-21166: Object lifecycle issue in audio. Reported by Alison Huffman,
Microsoft Browser Vulnerability Research on 2021-02-11
CVE-2021-21167: Use after free in bookmarks. Reported by Leecraso and Guang
Gong of 360 Alpha Lab on 2020-12-22
CVE-2021-21168: Insufficient policy enforcement in appcache. Reported by Luan
Herrera (@lbherrera_) on 2020-11-24
CVE-2021-21169: Out of bounds memory access in V8. Reported by Bohan Liu
(@P4nda20371774) of Tencent Security Xuanwu Lab on 2021-01-13
CVE-2021-21170: Incorrect security UI in Loader. Reported by David Erceg on
2020-07-31
CVE-2021-21171: Incorrect security UI in TabStrip and Navigation. Reported by
Irvan Kurniawan (sourc7) on 2020-11-25
CVE-2021-21172: Insufficient policy enforcement in File System API. Reported by
Maciej Pulikowski on 2020-11-19
CVE-2021-21173: Side-channel information leakage in Network Internals. Reported
by Tom Van Goethem from imec-DistriNet, KU Leuven on 2020-12-01
CVE-2021-21174: Inappropriate implementation in Referrer. Reported by Ashish
Gautam Kamble on 2020-12-11
CVE-2021-21175: Inappropriate implementation in Site isolation. Reported by Jun
Kokatsu, Microsoft Browser Vulnerability Research on 2020-11-07
CVE-2021-21176: Inappropriate implementation in full screen mode. Reported by
Luan Herrera (@lbherrera_) on 2021-01-26
CVE-2021-21177: Insufficient policy enforcement in Autofill. Reported by
Abdulrahman Alqabandi, Microsoft Browser Vulnerability Research on 2021-02-03
CVE-2021-21178: Inappropriate implementation in Compositing. Reported by Japong
on 2021-02-03
CVE-2021-21179: Use after free in Network Internals. Reported by Anonymous on
2021-02-05
CVE-2021-21180: Use after free in tab search. Reported by Abdulrahman
Alqabandi, Microsoft Browser Vulnerability Research on 2021-02-07
CVE-2020-27844: Heap buffer overflow in OpenJPEG. Reported by Sean Campbell at
Tableau on 2021-02-12
CVE-2021-21181: Side-channel information leakage in autofill. Reported by Xu
Lin (University of Illinois at Chicago), Panagiotis Ilia (University of
Illinois at Chicago), Jason Polakis (University of Illinois at Chicago) on
2021-02-26
CVE-2021-21182: Insufficient policy enforcement in navigations. Reported by
Luan Herrera (@lbherrera_) on 2020-02-05
CVE-2021-21183: Inappropriate implementation in performance APIs. Reported by
Takashi Yoneuchi (@y0n3uchy) on 2020-07-15
CVE-2021-21184: Inappropriate implementation in performance APIs. Reported by
James Hartig on 2020-09-24
CVE-2021-21185: Insufficient policy enforcement in extensions. Reported by
David Erceg on 2020-06-30
CVE-2021-21186: Insufficient policy enforcement in QR scanning. Reported by
dhirajkumarnifty on 2020-11-28
CVE-2021-21187: Insufficient data validation in URL formatting. Reported by
Kirtikumar Anandrao Ramchandani on 2020-12-04
CVE-2021-21188: Use after free in Blink. Reported by Woojin Oh(@pwn_expoit) of
STEALIEN on 2020-12-24
CVE-2021-21189: Insufficient policy enforcement in payments. Reported by Khalil
Zhani on 2021-01-11
CVE-2021-21190: Uninitialized Use in PDFium. Reported by Zhou Aiting(@zhouat1)
of Qihoo 360 Vulcan Team on 2021-01-13