CVE-2020-16013: high-severity vulnerability in Google Chrome
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA.
Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.
Apply updates per vendor instructions.
Google Chrome's V8 JavaScript engine had a flaw that could allow attackers to corrupt memory on your computer through a malicious webpage, potentially leading to crashes or unauthorized access.
An out-of-bounds write vulnerability (CWE-787) in V8's implementation prior to v86.0.4240.198 allows remote attackers to trigger heap corruption via specially crafted HTML. Exploitation requires user interaction (visiting a malicious page) and can result in arbitrary code execution or denial of service.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.