CVE-2020-16009 — Vulnetix

Try Vulnetix Request Demo

CVE-2020-16009 PUBLISHED KEV

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

EPSS 84.38% · 99.3th percentile

Risk Scores

EPSS Score

84.38%

99.3th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:16.04:LTS	chromium-browser	0, 45.0.2454.101-0ubuntu1.1201, 47.0.2526.73-0ubuntu1.1218
Ubuntu:18.04:LTS	chromium-browser	0, 61.0.3163.100-0ubuntu1.1378, 62.0.3202.62-0ubuntu0.17.10.1380

Timeline

Jan 20, 1970 VulnCheck XDB Entry
Jan 20, 1970 VulnCheck XDB Entry
Jan 20, 1970 VulnCheck XDB Entry
Jan 20, 1970 VulnCheck XDB Entry
Jan 20, 1970 VulnCheck XDB Entry
Jan 21, 1970 VulnCheck XDB Entry
Nov 2, 2020 PoC Published
Nov 3, 2020 CVE Published
Nov 9, 2020 PoC Published
Apr 14, 2021 EPSS Score
Jun 8, 2021 VulnCheck KEV Exploitation
Nov 3, 2021 CISA KEV Added

References

https://ubuntu.com/security/CVE-2020-16009 third-party-advisory
https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html third-party-advisory
https://crbug.com/1143772 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2020-16009 third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog third-party-advisory
Multiples vulnérabilités dans Google Chrome advisory

Open in Interactive Console →