CVE-2020-16009
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Affected (11)
Show all products
Cefsharp: Cefsharp · Google: Chrome · Microsoft: Edge, Edge Chromium · Opensuse: Backports Sle, Leap · Fedoraproject: Fedora · Debian: Debian Linux
Configuration A
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 15.0 sp1 | |
| Version 15.1 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 32 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 10.0 |
Related CWEs
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
References (19)
Source: chrome-cve-admin@google.com
Broken LinkMailing ListThird Party Advisory
Source: chrome-cve-admin@google.com
Broken LinkMailing ListThird Party Advisory
Source: chrome-cve-admin@google.com
ExploitThird Party AdvisoryVDB Entry
Source: chrome-cve-admin@google.com
Release NotesVendor Advisory
Source: chrome-cve-admin@google.com
Release Notes
Source: chrome-cve-admin@google.com
Release Notes
Source: chrome-cve-admin@google.com
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Release Notes
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource
Timeline
No history available yet.