{"vulnerability": "CVE-2021-21114", "sightings": [{"uuid": "259be608-2709-4128-978f-b162f13586c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21114", "type": "seen", "source": "https://t.me/cibsecurity/21857", "content": "\u203c CVE-2021-21114 \u203c\n\nUse after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-08T22:42:07.000000Z"}, {"uuid": "27c7c0a8-a09a-4a72-ac24-84ba0b6e65ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21114", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2873", "content": "#exploit\n1. CVE-2020-6507:\nChrome RCE on macOS 11.2.1\nhttps://github.com/r0t0tiller/Exploits/tree/master/V8/CVE-2020-6507\n\n2. CVE-2020-15972, CVE-2021-21114:\nUaF in Chrome AudioHandler\nhttps://securitylab.github.com/advisories/GHSL-2020-167-chrome", "creation_timestamp": "2024-05-07T14:30:28.000000Z"}, {"uuid": "11134ff8-4e76-46d7-a6b7-5afd8c860c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21114", "type": "seen", "source": "https://t.me/cissp/2491", "content": "Malware analysis\ud83d\ude01\nMicrosoft-Themed Phishing Attack Targets Executives Using Fake Google reCAPTCHA Technique\nhttps://www.zscaler.com/blogs/security-research/microsoft-themed-phishing-attack-targets-executives-using-fake-google\n\nOffensive security\ud83d\udc40\n1. The Universal SSL pinning bypass for Android applications\nhttps://infosecwriteups.com/hail-frida-the-universal-ssl-pinning-bypass-for-android-e9e1d733d29\n2. Reverse Engineering a Flutter app by recompiling Flutter Engine\nhttps://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine\n\nThreat Research\n\"Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses\", 2021.\nhttps://orenlab.sise.bgu.ac.il/p/PP0?k\n]-> Artifact Repository:\nhttps://github.com/Yossioren/pp0\n]-> .pdf:\nhttps://orenlab.sise.bgu.ac.il/p/PP0.pdf\n\nRed Team Tactics:\nContent Security Policy\u00a0(CSP) Bypass Guidelines\nhttps://brutelogic.com.br/blog/csp-bypass-guidelines\nCSP Reference:\nhttps://content-security-policy.com\n\nCVE-2020-6507:\nChrome RCE on macOS 11.2.1 (PoC)\nhttps://github.com/r0t0tiller/Exploits/tree/master/V8/CVE-2020-6507\n\nCVE-2020-15972, CVE-2021-21114:\nUse-after-free (UaF) in Chrome AudioHandler\nhttps://securitylab.github.com/advisories/GHSL-2020-167-chrome", "creation_timestamp": "2026-09-01T17:01:00.579034Z"}, {"uuid": "ea6863ae-0120-4e61-92de-303d5cfe6b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21114", "type": "seen", "source": "https://t.me/cissp/2491", "content": "Malware analysis\ud83d\ude01\nMicrosoft-Themed Phishing Attack Targets Executives Using Fake Google reCAPTCHA Technique\nhttps://www.zscaler.com/blogs/security-research/microsoft-themed-phishing-attack-targets-executives-using-fake-google\n\nOffensive security\ud83d\udc40\n1. The Universal SSL pinning bypass for Android applications\nhttps://infosecwriteups.com/hail-frida-the-universal-ssl-pinning-bypass-for-android-e9e1d733d29\n2. Reverse Engineering a Flutter app by recompiling Flutter Engine\nhttps://tinyhack.com/2021/03/07/reversing-a-flutter-app-by-recompiling-flutter-engine\n\nThreat Research\n\"Prime+Probe 1, JavaScript 0: Overcoming Browser-based Side-Channel Defenses\", 2021.\nhttps://orenlab.sise.bgu.ac.il/p/PP0?k\n]-> Artifact Repository:\nhttps://github.com/Yossioren/pp0\n]-> .pdf:\nhttps://orenlab.sise.bgu.ac.il/p/PP0.pdf\n\nRed Team Tactics:\nContent Security Policy\u00a0(CSP) Bypass Guidelines\nhttps://brutelogic.com.br/blog/csp-bypass-guidelines\nCSP Reference:\nhttps://content-security-policy.com\n\nCVE-2020-6507:\nChrome RCE on macOS 11.2.1 (PoC)\nhttps://github.com/r0t0tiller/Exploits/tree/master/V8/CVE-2020-6507\n\nCVE-2020-15972, CVE-2021-21114:\nUse-after-free (UaF) in Chrome AudioHandler\nhttps://securitylab.github.com/advisories/GHSL-2020-167-chrome", "creation_timestamp": "2026-09-02T01:04:51.348387Z"}]}