CVE-2021-38000VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2021-38000: Google Chromium Intents Improper Input Validation Vulnerability

Affects Google Chromium IntentsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 11/17/2021
EPSS: 4.9% chance of exploitation in 30 days – higher than 92% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2021-38000 (opens in a new tab)

Description

CVE-2021-38000 is an improper input validation vulnerability in Google Chromium Intents that allows a remote attacker to cause a browser to navigate to a malicious URL via a crafted HTML page. This affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.

Summary

Google Chromium Intents contains an improper input validation vulnerability (CWE-20) that enables remote attackers to arbitrarily redirect a browser to a malicious URL through a crafted HTML page. This vulnerability impacts multiple Chromium-based browsers including Google Chrome, Microsoft Edge, and Opera. Exploitation has been observed in the wild. No vendor advisory or patch information is available in the provided data.

Impact

Successful exploitation allows remote attackers to redirect users to malicious URLs, potentially facilitating phishing or other malicious activities. The vulnerability affects multiple widely used Chromium-based browsers, increasing the potential attack surface. Known exploitation in the wild indicates active threat.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users and administrators should exercise caution when interacting with untrusted HTML content that could exploit this vulnerability.

Weaknesses

CWE-20Improper Input Validation (opens in a new tab)

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:20:58 UTC

Weaknesses

References

Related threats