security_identifier

CVE-2021-38003

Vulnerability in Chrome's V8 JavaScript engine involving JSON.stringify, which exposed an internal value to scripts and allowed memory corruption and code execution. Fixed in Chrome 95 in October 2021.

Current clusters

security1 publisher

UNC3569 exploited a Sogou Input Method link handler to run code as the user

Gen Digital found the chain while working a live UNC3569 intrusion. Tencent's April 2026 fix closed the link handler and left the bundled Chromium 80 in place, with its sandbox still switched off in the code.

Publishers:thehackernews.com

Reality

Evidence68
Adoption74
Hype gap+8
Incentives62
Confidence63