NetSight
IP …
high8.8Known exploited

CVE-2020-16009

Google Chromium V8 Type Confusion Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2021-11-03. Federal due date: 2022-05-03.

Apply updates per vendor instructions.

Impact

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

VendorProductAffected versions
CefsharpCefsharp
before 86.0.241
GoogleChrome
before 86.0.4240.183
MicrosoftEdge
before 86.0.622.63
MicrosoftEdge Chromium
before 86.0.4240.183
OpensuseBackports Sle
Version 15.0
OpensuseLeap
Versions 15.1, 15.2
FedoraprojectFedora
Versions 32, 33
DebianDebian Linux
Version 10.0

Weakness classification

CWE-787CWE-843

References