Name: CVE-2020-16013: Out-of-bounds Write
Published: 2021-01-08T00:00:00.000Z
Keywords: CVE, CVE-2020-16013, CWE-787, Exploited in the Wild, CISA KEV Exploit, CVSS 8.8, EPSS 0.02826, CISA KEV

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	centos-upgrade-chromium-browsercentos-upgrade-chromium-browser-debuginfo	Nov 24, 2020	Nov 23, 2020
Debian	View advisory ↗	debian-upgrade-chromium	Jan 4, 2021	Jan 4, 2021
Gentoo Linux	View advisory ↗	gentoo-linux-upgrade-www-client-chromiumgentoo-linux-upgrade-www-client-google-chrome	Nov 17, 2020	Nov 16, 2020
Google Chrome	View advisory ↗View advisory ↗View advisory ↗	google-chrome-upgrade-latest	Nov 12, 2020	Nov 12, 2020
Microsoft Edge	View advisory ↗View advisory ↗	microsoft-edge-upgrade-latest	Nov 17, 2021	Jan 8, 2021
Redhat_linux	—	redhat-upgrade-chromium-browserredhat-upgrade-chromium-browser-debuginfo	Nov 24, 2020	Nov 23, 2020
Suse	—	suse-upgrade-chromedriversuse-upgrade-chromiumsuse-upgrade-opera	Nov 16, 2020	Nov 16, 2020
Ubuntu	View advisory ↗View advisory ↗View advisory ↗	ubuntu-upgrade-chromium-browser	Nov 19, 2024	Jan 8, 2021

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub