CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-11-23
Google Chrome on Android Intent Insufficient Validation Open Redirect Vulnerability (CVE-2021-38000, CISA KEV)
[Affected Scope] Google Chrome on Android prior to version 95.0.4638.69
[Impact] Remote attackers can force the browser to navigate to arbitrary malicious URLs via crafted HTML pages, leading to credential phishing or drive-by downloads
[Mitigation] Immediately update Google Chrome on Android to the latest version (95.0.4638.69 or higher) via the Google Play Store