CVE-2021-37990 : What You Need to Know

This article provides details about CVE-2021-37990, a vulnerability in WebView in Google Chrome on Android prior to version 95.0.4638.54 that allowed a remote attacker to leak cross-origin data via a crafted app.

Understanding CVE-2021-37990

Inappropriate implementation in WebView in Google Chrome on Android allowed a remote attacker to exploit the vulnerability and leak cross-origin data.

What is CVE-2021-37990?

The CVE-2021-37990 vulnerability was found in Google Chrome's WebView on Android devices prior to version 95.0.4638.54, enabling a remote attacker to access cross-origin data by using a maliciously crafted app.

The Impact of CVE-2021-37990

The impact of this vulnerability is significant as it allows unauthorized remote access to confidential cross-origin data, potentially leading to data leaks or misuse by malicious entities.

Technical Details of CVE-2021-37990

This section covers the technical aspects of the CVE-2021-37990 vulnerability.

Vulnerability Description

The vulnerability arises from an inappropriate implementation in WebView in Google Chrome on Android devices, creating an avenue for remote attackers to exploit the flaw via a crafted app.

Affected Systems and Versions

Google Chrome on Android versions prior to 95.0.4638.54 are affected by this vulnerability, highlighting the importance of updating to secure, non-vulnerable versions.

Exploitation Mechanism

Attackers leverage the vulnerability in WebView to leak cross-origin data by tricking users into interacting with maliciously crafted apps that abuse the flaw.

Mitigation and Prevention

To safeguard systems from CVE-2021-37990 and similar vulnerabilities, it is crucial to follow appropriate mitigation strategies and security practices.

Immediate Steps to Take

Users are advised to update Google Chrome on their Android devices to version 95.0.4638.54 or later to mitigate the risk of exploitation.

Long-Term Security Practices

Maintaining up-to-date software, being cautious of app sources, and practicing safe browsing habits are essential for long-term security.

Patching and Updates

Regularly check for security updates and patches released by Google Chrome to address known vulnerabilities and enhance system security.