Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2021-21206

Your trail

Where next?

CVE-2021-21206

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

5 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority72.3–73.4

Coverage97.0%

Connections3

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 3

has cited scope1 retained · stored CVE-2021-21206 → Google · Chrome

7010cc80-e6e2-4ac3-9d8b-dff59ed3da8c

has vulnerable target scope1 retained · stored CVE-2021-21206 → google · chrome

8efca09a-9afe-4656-881b-d98596fe2874

has vulnerable target scope3 retained · stored CVE-2021-21206 → fedoraproject · fedora

2253d351-dc95-400a-bb2b-7b992caba4483b14c7f5-c930-4877-af9f-36e4db8a4852a52d7ca1-9ec5-4536-ad85-0a987f51816b

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.