Google · Google Chrome · CVE-2021-21186
**Name of the Vulnerable Software and Affected Versions**
Google Chrome on iOS versions prior to 89.0.4389.72
**Description**
The issue is related to insufficient policy enforcement in the QR scanning function of Google Chrome on iOS, which can be exploited by an attacker to bypass navigation restrictions. This can be achieved by convincing the user to scan a crafted QR code, allowing the attacker to circumvent existing access controls.
**Recommendations**
For Google Chrome on iOS versions prior to 89.0.4389.72, update to version 89.0.4389.72 or later to resolve the issue. As a temporary workaround, consider restricting the use of the QR scanning function until the update is applied. Avoid scanning QR codes from untrusted sources to minimize the risk of exploitation.