CVE-2021-21186: Debian Linux

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code.

Affected products

• Debian Debian Linux: version 10.0 only
• Fedoraproject Fedora: version 32 only; version 33 only; version 34 only
• Google Chrome: before 89.0.4389.72 (fixed in 89.0.4389.72)

Published 2021-03-09. Last modified 2026-06-17.