CVE-2020-16009
03.11.2020, 03:15
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| Vendor | Product | Version |
|---|---|---|
| cefsharp | cefsharp | 𝑥 < 86.0.241 |
| chrome | 𝑥 < 86.0.4240.183 | |
| microsoft | edge | 𝑥 < 86.0.622.63 |
| microsoft | edge_chromium | 𝑥 < 86.0.4240.183 |
| opensuse | backports_sle | 15.0:sp1 |
| opensuse | backports_sle | 15.0:sp2 |
| opensuse | leap | 15.1 |
| opensuse | leap | 15.2 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.
- CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')The program allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
References