DEBIAN-CVE-2021-21186

Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2021-21186
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2021-21186.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2021-21186
Upstream
Published
2021-03-09T18:15:17Z
Modified
2025-09-19T06:24:59Z
Summary
[none]
Details

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.

References

Affected packages

Debian:11 / chromium

Package

Name
chromium
Purl
pkg:deb/debian/chromium?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
89.0.4389.82-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / chromium

Package

Name
chromium
Purl
pkg:deb/debian/chromium?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
89.0.4389.82-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / chromium

Package

Name
chromium
Purl
pkg:deb/debian/chromium?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
89.0.4389.82-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:14 / chromium

Package

Name
chromium
Purl
pkg:deb/debian/chromium?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
89.0.4389.82-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}