CVE-2021-30560: Debian Linux

High severity, CVSS 8.8. EPSS: 17.6% chance of exploitation in the next 30 days.

Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Google Chrome: before 91.0.4472.164 (fixed in 91.0.4472.164)
• Splunk Universal Forwarder: from 8.2.0, before 8.2.12 (fixed in 8.2.12); from 9.0.0, before 9.0.6 (fixed in 9.0.6); version 9.1.0 only
• Xmlsoft Libxslt: before 1.1.35 (fixed in 1.1.35)

Published 2021-08-03. Last modified 2026-06-17.