{"vulnerability": "CVE-2021-21210", "sightings": [{"uuid": "4b1cf798-9835-4505-a106-1443ef85fb01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/5495", "content": "How I found my first Chrome bug\n\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248", "creation_timestamp": "2021-06-28T22:41:33.000000Z"}, {"uuid": "59f3dad6-e6f5-43b9-9ff2-fe17b5c82ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3733", "content": "#Threat_Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream", "creation_timestamp": "2021-07-01T11:03:01.000000Z"}, {"uuid": "802d0267-0e2c-4afc-b1b4-bf9cff5e1bc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "Telegram/OLdQRt4r2fdV5UESECHPSF63VM8iagrfFP3qgk5zexwtf7U", "content": "", "creation_timestamp": "2026-08-16T19:00:05.995447Z"}, {"uuid": "91abab9a-065f-4aac-908b-bb911c88c98b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "published-proof-of-concept", "source": "Telegram/OLdQRt4r2fdV5UESECHPSF63VM8iagrfFP3qgk5zexwtf7U", "content": "", "creation_timestamp": "2026-08-17T00:00:09.513460Z"}, {"uuid": "7d683b8a-57b3-485b-aed1-eb7c418a01f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-01T17:00:46.817164Z"}, {"uuid": "19629cc5-652e-4c6e-9c6d-a6b19a48f199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14605", "content": "How I found my first Chrome bug (CVE-2021\u201321210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:02:34.631837Z"}, {"uuid": "3486de59-af72-4529-94b9-a0b424dd4cb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14607", "content": "On October 31, 2020, @SamyKamkar published his research on NAT Slipstreaming. According to his own words, NAT Slipstreaming \u2014Continue reading on Medium \u00bb (https://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:02:34.680991Z"}, {"uuid": "e9f09437-bb4d-4472-af5c-fc778831aa6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14605", "content": "How I found my first Chrome bug (CVE-2021\u201321210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:03:09.328621Z"}, {"uuid": "579c8dac-0339-47ba-b084-8704d708dbd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/hacking_Attack/14607", "content": "On October 31, 2020, @SamyKamkar published his research on NAT Slipstreaming. According to his own words, NAT Slipstreaming \u2014Continue reading on Medium \u00bb (https://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:03:09.373479Z"}, {"uuid": "46273eb3-dcf8-41e3-a340-6b023203703b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21210", "type": "seen", "source": "https://t.me/cissp/3617", "content": "Research\n\"A Mirage of Safety:\nBug Finding and Exploit Techniques of Top Android Vendor's Privacy Protection Apps\", 2021.\nhttps://xlab.tencent.com/en/2021/05/14/A-Mirage-of-Safety-Bug-Finding-and-Exploit-Techniques-of-Top-Android-Vendors-Privacy-Protection-Apps\n// A1: Attack from malicious apps\n    A2: Attack from malicious apps which can gain system previledge\n    A3: Attackers have physically compromise the phone\n\nThreat Research\n1. CVE-2018-18472:\nWestern Digital My Book Live Mass Exploitation\nhttps://censys.io/blog/cve-2018-18472-western-digital-my-book-live-mass-exploitation\n2. RTSP NAT Slipstream on Google Chrome 89.0\n(PoC for CVE-2021-21210)\nhttps://vovohelo.medium.com/how-i-found-my-first-chrome-bug-cve-2021-21210-248a21272248\n]-> NAT Slipstream samples:\nhttps://github.com/bananabr/natslipstream\n\nRed Team Tactics\n1. GateKeeper macOS Bypass\nhttps://theevilbit.github.io/posts/gatekeeper_not_a_bypass\n2. Metadata service MITM allows root privilege escalation (EKS/GKE)\nhttps://blog.champtar.fr/Metadata_MITM_root_EKS_GKE\n\nThreat\n1. An EPYC escape:\nCase-study of a KVM breakout (PoC for CVE-2021-29657)\nhttps://googleprojectzero.blogspot.com/2021/06/an-epyc-escape-case-study-of-kvm.html?m=0\n2. Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)\nhttps://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464", "creation_timestamp": "2026-09-02T01:04:34.353242Z"}]}