CVE-2020-16017
CVE-2020-16017
In short
A memory flaw in Google Chrome allowed attackers who compromised the browser's rendering process to escape the security sandbox through a specially crafted webpage. This could give them access to your system beyond the browser's protections.
Technical detail
Use-after-free vulnerability in Chrome's site isolation mechanism (CWE-416) permitted sandbox escape when renderer process was compromised. Attack vector requires prior renderer compromise; impact is sandbox escape with potential system-level code execution. Affected versions prior to 86.0.4240.198.
Summary generated and translated by AI from the official description.
Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Affected products
Google · ChromeWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →