Vulnerabilities > CVE-2021-37990
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app.
Vulnerable Configurations
References
- https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html
- https://chromereleases.googleblog.com/2021/10/stable-channel-update-for-desktop_19.html
- https://crbug.com/1247395
- https://crbug.com/1247395
- https://www.debian.org/security/2022/dsa-5046
- https://www.debian.org/security/2022/dsa-5046