CVE-2020-16011

CVE-2020-16011: falha em Google Chrome

Publicada em 03 nov 2020 · Atualizada em 04 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.4%

Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Produtos afetados

Google · Chrome

CVEs relacionadas — Google Chrome

No mesmo produto, das mais perigosas para as menos.

CVE-2023-4863HIGHCVE-2023-4863EPSS 100.0%KEV CVE-2018-17463HIGHCVE-2018-17463EPSS 84.6%KEV CVE-2021-21224HIGHCVE-2021-21224EPSS 84.2%KEV CVE-2020-6418HIGHCVE-2020-6418EPSS 78.8%KEV CVE-2022-2294HIGHCVE-2022-2294EPSS 70.8%KEV CVE-2021-21220HIGHCVE-2021-21220EPSS 70.4%KEV

Referências

http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html http://packetstormsecurity.com/files/159975/Chrome-ConvertToJavaBitmap-Heap-Buffer-Overflow.html https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html https://crbug.com/1144489 https://www.debian.org/security/2021/dsa-4824