Active Exploitation of Zero-Day Vulnerability in Google Chrome
NJCCIC Advisory
Original Release Date: 3/4/2021
Summary
A high severity zero-day vulnerability, CVE-2021-21166, in Google Chrome is actively being exploited. The vulnerability, described as an object lifestyle issue in audio, is one of several high severity vulnerabilities patched in the most recent update. The most severe of these vulnerabilities could allow a threat actor to execute arbitrary code in the browser and possibly modify or delete data.
Recommendations
The NJCCIC recommends users update to Chrome version 89.0.4389.72 as soon as possible, after appropriate testing. More information on the vulnerabilities can be found in the Chrome blog post.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.