{"id":"CVE-2021-34421","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-34421","generatedAt":"2026-10-27T22:31:10.888Z","title":"This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.","description":"The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to disclosure of sensitive information which was meant to be deleted from the customer's device.","published":"2021-11-11T23:15:10.000Z","lastModified":"2026-06-17T03:55:49.000Z","status":"Modified","sourceIdentifier":"security@zoom.us","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"},"cwe":["CWE-459"],"affected":["keybase/keybase"],"epss":{"score":0.00713,"percentile":0.53376,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.71%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://explore.zoom.us/en/trust/security/security-bulletin","tags":["Third Party Advisory"],"source":"security@zoom.us"},{"url":"https://explore.zoom.us/en/trust/security/security-bulletin","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-34421","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}