Google · Google Chrome · CVE-2021-21143
**Name of the Vulnerable Software and Affected Versions**
Google Chrome versions prior to 88.0.4324.146
**Description**
The issue is related to a heap buffer overflow in the Extensions component of Google Chrome, which could allow an attacker to exploit heap corruption via a crafted Chrome Extension if a user is convinced to install a malicious extension. This could potentially impact the confidentiality, integrity, and availability of protected information.
**Recommendations**
For versions prior to 88.0.4324.146, update to version 88.0.4324.146 or later to resolve the issue. As a temporary workaround, consider disabling the installation of new extensions until the update is applied. Restrict access to the Extensions component to minimize the risk of exploitation. Avoid using crafted Chrome Extensions until the issue is resolved.