CVE-2021-37973: Google Chromium Portals Use-After-Free Vulnerability
Summary: CVE-2021-37973 is a use-after-free vulnerability in Google Chromium Portals that lets a remote attacker who has already compromised the renderer process potentially escape the sandbox via a crafted HTML page. It affects browsers built on Chromium, including Google Chrome and Microsoft Edge, and CISA set a remediation due date of 2021-11-17.
Bottom line: The flaw only pays off for an attacker who already holds the renderer process, so it is a second-stage move in a browser exploit chain rather than a standalone entry point - and CISA lists known ransomware campaign use for this CVE as unknown.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2021-37973Google
- Related
- CVE-2026-125350: Google Chromium Use-After-Free Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026CVE-2026-58704: Google Pixel Improper Authorization Vulnerability Known Exploited Vulnerabilities · Sep 16, 2026