{"vulnerability": "CVE-2021-2118", "sightings": [{"uuid": "2fcef000-6168-49ca-8c3b-70b8ef8caff1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21189", "type": "seen", "source": "https://t.me/cibsecurity/24629", "content": "\u203c CVE-2021-21189 \u203c\n\nInsufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-09T20:51:55.000000Z"}, {"uuid": "1a5cfc53-192a-4675-af2c-14b08777fac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21186", "type": "seen", "source": "https://t.me/cibsecurity/24622", "content": "\u203c CVE-2021-21186 \u203c\n\nInsufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-09T20:51:45.000000Z"}, {"uuid": "b12c1cde-f3e5-4e99-b62c-6c4a87205d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21181", "type": "seen", "source": "https://t.me/cibsecurity/24621", "content": "\u203c CVE-2021-21181 \u203c\n\nSide-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-09T20:51:44.000000Z"}, {"uuid": "099844f2-3209-409e-97ac-c16b8efd705b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21188", "type": "seen", "source": "https://t.me/cibsecurity/24631", "content": "\u203c CVE-2021-21188 \u203c\n\nUse after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-09T20:52:00.000000Z"}, {"uuid": "cc538988-eede-4e1a-b00b-3adc93ee3022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21187", "type": "seen", "source": "https://t.me/cibsecurity/24637", "content": "\u203c CVE-2021-21187 \u203c\n\nInsufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-09T20:52:07.000000Z"}]}