VULNERABILITY INTELLIGENCE

CVE-2021-21147

CVSS score4.3 MEDIUM

EPSS probability0.84%

CISA KEVNot currently listed

Published2021-02-09

Last modified2026-06-17

Description

Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.