CVE-2021-34421

4.3 mediumEPSS 0.7%

Medium (4.3) in keybase keybase. EPSS 0.7% chance of exploitation in the next 30 days.

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-459
Published: 2021-11-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

keybase:keybase

References

https://explore.zoom.us/en/trust/security/security-bulletin
https://explore.zoom.us/en/trust/security/security-bulletin

Check your stack JSON