CVE-2020-16013
Inappropriate implementation in V8 in CefSharp
8.8 HighIn KEVFix available
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
2.76%Up 2.4 points since Apr 14, 2021
What each source reports
NVD Score used
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2020-16013- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2020-16013- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
EUVDEUVD-2020-1474
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
EUVD-2020-1474- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x7fx-mcc9-27j7 No score
Inappropriate implementation in V8 in CefSharp
High CVE-2020-16013: Inappropriate implementation in V8.
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16013
Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.
There is currently little to no public information on the issue other than it has been flagged as High severity.
- Record
GHSA-x7fx-mcc9-27j7- Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
CISA KEV No score
Google Chromium V8 Incorrect Implementation Vulnerabililty
Google Chromium V8 Engine contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Record
CVE-2020-16013- Weakness
- CWE-787
- Updated
- 2026-11-02
OSV
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
CVE-2020-16013- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 11 moreShow less
OSVDEBIAN-CVE-2020-16013
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
DEBIAN-CVE-2020-16013- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:5165
Red Hat Security Advisory: chromium-browser security update
- Record
RHSA-2020:5165- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-16013
Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- Record
UBUNTU-CVE-2020-16013- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-x7fx-mcc9-27j7 No score
Inappropriate implementation in V8 in CefSharp
High CVE-2020-16013: Inappropriate implementation in V8.
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16013
Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.
There is currently little to no public information on the issue other than it has been flagged as High severity.
- Record
GHSA-x7fx-mcc9-27j7- Weakness
- CWE-119, CWE-787
- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1929-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 86.0.4240.198 (boo#1178703)
- CVE-2020-16013: Inappropriate implementation in V8
- CVE-2020-16017: Use after free in site isolation
Update to 86.0.4240.193 (boo#1178630)
- CVE-2020-16016: Inappropriate implementation in base.
- Record
openSUSE-SU-2020:1929-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1943-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 86.0.4240.198 (boo#1178703)
- CVE-2020-16013: Inappropriate implementation in V8
- CVE-2020-16017: Use after free in site isolation
Update to 86.0.4240.193 (boo#1178630)
- CVE-2020-16016: Inappropriate implementation in base.
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2020:1943-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2013-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 86.0.4240.198 (boo#1178703)
- CVE-2020-16013: Inappropriate implementation in V8
- CVE-2020-16017: Use after free in site isolation
Update to 86.0.4240.193 (boo#1178630)
- CVE-2020-16016: Inappropriate implementation in base.
This update was imported from the openSUSE:Leap:15.1:Update update project.
- Record
openSUSE-SU-2020:2013-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2016-1 No score
Security update for chromium
This update for chromium fixes the following issues:
Update to 86.0.4240.198 (boo#1178703)
- CVE-2020-16013: Inappropriate implementation in V8
- CVE-2020-16017: Use after free in site isolation
Update to 86.0.4240.193 (boo#1178630)
- CVE-2020-16016: Inappropriate implementation in base.
This update was imported from the openSUSE:Leap:15.2:Update update project.
- Record
openSUSE-SU-2020:2016-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:2178-1 No score
Security update for opera
This update for opera fixes the following issues:
-
Update to version 72.0.3815.400
- DNA-88996 [Mac] Vertical spacing of sidebar items incorrect
- DNA-89698 [Mac] text on bookmark bar not visible when application is not focused
- DNA-89746 Add product-name switch to Opera launcher and installer
- DNA-89779 Implement multi-window behavior for pinned Player
- DNA-89924 Music continue to play after the disabling Player from Sidebar
- DNA-89994 Fix progress bar shape and color
- DNA-89995 Fix font sizes, weights and colors of text in control panel
- DNA-90010 Payment Methods in Settings mention Google account
- DNA-90022 [Mac][BigSur] Crash at -[BrowserWindowController window:willPositionSheet:usingRect:]
- DNA-90025 Player stays in the autopause after reloading panel – part 2
- DNA-90096 Sidebar click stat not collected for Player
- DNA-90143 Adding a stat for Player sidebar clicks to the Avro schema
-
Update to version 72.0.3815.378
- CHR-8192 Update chromium on desktop-stable-86-3815 to 86.0.4240.198
- DNA-86550 XHRUint8Array test time out
- DNA-88631 Unintended volume drop
- DNA-88708 [Snap] Inproper area snapped
- DNA-88726 [Mac] Overlay ‘pause’ icon when Opera auto-pauses the Player
- DNA-88903 Detach video button should not be visible
- DNA-88938 Make home page reflect service configuration
- DNA-88943 Learn more link on home page doesnt work
- DNA-88944 Apple Music service slow to open
- DNA-88948 Fetch audio focus request id from MediaSession
- DNA-88949 Detach video button missing
- DNA-88966 No accessiblity titles for services icons in home page
- DNA-88967 Investigate creating a single BrowserSidebarModel instance
- DNA-88995 Overlay “pause” is displayed when it shouldn’t
- DNA-89017 Error when signing out of YouTube Music
- DNA-89054 Audio is not resumed when muting audio in tab
- DNA-89094 DCHECK when pressing Reload button
- DNA-89095 Manage service data through PlayerService
- DNA-89100 [Player] Crash – many scenarios
- DNA-89187 Reload button doesn’t work properly
- DNA-89189 Update icons and buttons
- DNA-89217 Enable #player-service on developer stream
- DNA-89220 SidebarCarouselTests.* failing
- DNA-89230 Crash at v8::Context::Enter()
- DNA-89244 Define default widths per service
- DNA-89245 Improve Spotify logo layout in home page buttons
- DNA-89248 Crash at opera::WebPageBrowserSidebarItemContentViewViews ::UpdatePlayerService()
- DNA-89278 [Sidebar] No notification for downloads and workspaces
- DNA-89285 [Engine] Unable to launch skype with Opera
- DNA-89292 Do not block page loads waiting for sitecheck data
- DNA-89316 Should be able to navigate directly to playerServices section in settings
- DNA-89339 Make popup appear with tooltip-like behavior
- DNA-89340 Implement control panel looks in light and dark mode
- DNA-89341 Make the control panel buttons work
- DNA-89342 Add support for the DNA to the rollout system
- DNA-89344 Show Music Service icon in the control panel
- DNA-89360 Make ‘Settings’ menu entry go to settings
- DNA-89366 Make opera://feedback/babe attachable by the webdriver
- DNA-89419 Crash at base::Value::GetAsDictionary (base::DictionaryValue const**) const
- DNA-89469 Autopause does not work
- DNA-89477 Do not wait with starting the player if the interrupting session is short
- DNA-89480 Crash when hovering player panel
- DNA-89484 Crash at base::internal::CheckedObserverAdapter ::IsMarkedForRemoval()
- DNA-89489 Put control panel behind feature flag
- DNA-89514 Implement feedback button for Player
- DNA-89516 Do not auto-pause the Player when there is no sound
- DNA-89553 Make the control panel show current song
- DNA-89557 No accessibility title for rating and close buttons inside feedback dialog
- DNA-89561 Make the control panel show artwork that represents current track …
- Record
openSUSE-SU-2020:2178-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10681-1 No score
chromedriver-93.0.4577.82-1.1 on GA media
These are all security issues fixed in the chromedriver-93.0.4577.82-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10681-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score
ungoogled-chromium-113.0.5672.92-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12948-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
CefSharp.CommonNuGet |
before 86.0.241 | 86.0.241 |
CefSharp.WpfNuGet |
before 86.0.241 | 86.0.241 |
CefSharp.WinFormsNuGet |
before 86.0.241 | 86.0.241 |
CefSharp.Wpf.HwndHostNuGet |
before 86.0.241 | 86.0.241 |
chromiumDebian:12 |
before 87.0.4280.88-0.1 | 87.0.4280.88-0.1 |
chromiumDebian:13 |
before 87.0.4280.88-0.1 | 87.0.4280.88-0.1 |
chromiumDebian:14 |
before 87.0.4280.88-0.1 | 87.0.4280.88-0.1 |
chromiumDebian:10 From an advisory covering 140 CVEs |
before 87.0.4280.88-0.4~deb10u1, plus listed versions 73.0.3683.75-174.0.3729.108-175.0.3770.10-175.0.3770.80-175.0.3770.90-1 Show 42 moreShow less76.0.3809.100-176.0.3809.100-1~deb10u176.0.3809.62-176.0.3809.71-176.0.3809.87-176.0.3809.87-278.0.3904.108-178.0.3904.108-1~deb10u178.0.3904.87-178.0.3904.97-178.0.3904.97-1~deb10u179.0.3945.130-179.0.3945.130-1~deb10u179.0.3945.130-279.0.3945.56-179.0.3945.79-180.0.3987.106-180.0.3987.116-180.0.3987.122-180.0.3987.122-280.0.3987.132-180.0.3987.132-1~deb10u180.0.3987.149-180.0.3987.149-1~deb10u180.0.3987.162-180.0.3987.162-1~deb10u181.0.4044.62-181.0.4044.92-183.0.4103.106-183.0.4103.116-183.0.4103.116-1~deb10u183.0.4103.116-1~deb10u283.0.4103.116-1~deb10u383.0.4103.116-283.0.4103.116-383.0.4103.116-3.183.0.4103.83-184.0.4147.105-184.0.4147.89-187.0.4280.88-0.187.0.4280.88-0.287.0.4280.88-0.3 |
87.0.4280.88-0.4~deb10u1 |
CefSharp.CommonNuGet |
before 86.0.241, plus listed versions 31.0.0-pre133.0.033.0.233.1.0-pre0137.0.0 Show 45 moreShow less37.0.0-pre0137.0.0-pre0237.0.137.0.237.0.339.0.039.0.0-pre0139.0.0-pre0239.0.0-pre0339.0.139.0.241.0.041.0.0-pre0141.0.143.0.043.0.0-pre0143.0.0-pre0243.0.145.0.045.0.0-pre0147.0.047.0.0-pre0147.0.147.0.247.0.347.0.449.0.049.0.0-pre0149.0.0-pre0249.0.151.0.051.0.0-pre0151.0.0-pre0253.0.053.0.0-pre0153.0.155.0.055.0.0-pre0157.0.057.0.0-pre0162.0.0-pre0162.0.0-proprietary-codecs62.0.0-proprietary-codecs263.0.063.0.0-pre01 |
86.0.241 |
CefSharp.WpfNuGet |
before 86.0.241, plus listed versions 1.25.2-perlun01.25.31.25.41.25.51.25.6 Show 45 moreShow less1.25.71.25.83.29.0-pre031.0.0-pre133.0.033.0.233.1.0-pre0137.0.037.0.0-pre0137.0.0-pre0237.0.137.0.339.0.039.0.0-pre0139.0.0-pre0239.0.0-pre0339.0.139.0.241.0.041.0.0-pre0141.0.143.0.043.0.0-pre0143.0.0-pre0243.0.145.0.045.0.0-pre0147.0.047.0.0-pre0147.0.147.0.247.0.347.0.449.0.049.0.0-pre0149.0.0-pre0249.0.151.0.051.0.0-pre0151.0.0-pre0253.0.053.0.0-pre0153.0.155.0.055.0.0-pre01 |
86.0.241 |
Show 17 moreShow less
| Package | Affected | Fixed |
|---|---|---|
CefSharp.WinFormsNuGet |
before 86.0.241, plus listed versions 1.25.333.0.033.0.233.1.0-pre0137.0.0 Show 45 moreShow less37.0.0-pre0137.0.0-pre0237.0.137.0.339.0.039.0.0-pre0139.0.0-pre0239.0.0-pre0339.0.139.0.241.0.041.0.0-pre0141.0.143.0.043.0.0-pre0143.0.0-pre0243.0.145.0.045.0.0-pre0147.0.047.0.0-pre0147.0.147.0.247.0.347.0.449.0.049.0.0-pre0149.0.0-pre0249.0.151.0.051.0.0-pre0151.0.0-pre0253.0.053.0.0-pre0153.0.155.0.055.0.0-pre0157.0.057.0.0-pre0162.0.0-pre0162.0.0-proprietary-codecs62.0.0-proprietary-codecs263.0.063.0.0-pre0163.0.0-pre02 |
86.0.241 |
CefSharp.Wpf.HwndHostNuGet |
before 86.0.241, plus listed versions 83.4.20-pre84.4.1085.3.12185.3.130 |
86.0.241 |
chromium-browserRed Hat:rhel_extras:6 From an advisory covering 3 CVEs |
before 0:86.0.4240.198-1.el6_10 | 0:86.0.4240.198-1.el6_10 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 From an advisory covering 3 CVEs |
before 0:86.0.4240.198-1.el6_10 | 0:86.0.4240.198-1.el6_10 |
chromium-browserUbuntu:16.04:LTS |
before 86.0.4240.198-0ubuntu0.16.04.1, plus listed versions 45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229 Show 45 moreShow less49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.125053.0.2785.143-0ubuntu0.16.04.1.125453.0.2785.143-0ubuntu0.16.04.1.125755.0.2883.87-0ubuntu0.16.04.126356.0.2924.76-0ubuntu0.16.04.126857.0.2987.98-0ubuntu0.16.04.127658.0.3029.81-0ubuntu0.16.04.127758.0.3029.96-0ubuntu0.16.04.127958.0.3029.110-0ubuntu0.16.04.128159.0.3071.109-0ubuntu0.16.04.128959.0.3071.109-0ubuntu0.16.04.129160.0.3112.78-0ubuntu0.16.04.129360.0.3112.113-0ubuntu0.16.04.129861.0.3163.79-0ubuntu0.16.04.130061.0.3163.100-0ubuntu0.16.04.130662.0.3202.62-0ubuntu0.16.04.130862.0.3202.75-0ubuntu0.16.04.131362.0.3202.89-0ubuntu0.16.04.131562.0.3202.94-0ubuntu0.16.04.131763.0.3239.84-0ubuntu0.16.04.163.0.3239.132-0ubuntu0.16.04.164.0.3282.119-0ubuntu0.16.04.164.0.3282.140-0ubuntu0.16.04.164.0.3282.167-0ubuntu0.16.04.165.0.3325.181-0ubuntu0.16.04.166.0.3359.139-0ubuntu0.16.04.366.0.3359.181-0ubuntu0.16.04.167.0.3396.99-0ubuntu0.16.04.268.0.3440.75-0ubuntu0.16.04.168.0.3440.106-0ubuntu0.16.04.169.0.3497.81-0ubuntu0.16.04.170.0.3538.67-0ubuntu0.16.04.170.0.3538.77-0ubuntu0.16.04.170.0.3538.110-0ubuntu0.16.04.171.0.3578.80-0ubuntu0.16.04.171.0.3578.98-0ubuntu0.16.04.172.0.3626.119-0ubuntu0.16.04.172.0.3626.121-0ubuntu0.16.04.173.0.3683.75-0ubuntu0.16.04.173.0.3683.86-0ubuntu0.16.04.174.0.3729.169-0ubuntu0.16.04.1 |
86.0.4240.198-0ubuntu0.16.04.1 |
chromium-browserUbuntu:18.04:LTS |
before 86.0.4240.198-0ubuntu0.18.04.1, plus listed versions 61.0.3163.100-0ubuntu1.137862.0.3202.62-0ubuntu0.17.10.138062.0.3202.89-0ubuntu1.138662.0.3202.94-0ubuntu1.138863.0.3239.84-0ubuntu1 Show 42 moreShow less63.0.3239.108-0ubuntu164.0.3282.119-0ubuntu164.0.3282.140-0ubuntu164.0.3282.167-0ubuntu165.0.3325.146-0ubuntu165.0.3325.181-0ubuntu166.0.3359.139-0ubuntu0.18.04.366.0.3359.181-0ubuntu0.18.04.167.0.3396.99-0ubuntu0.18.04.168.0.3440.75-0ubuntu0.18.04.168.0.3440.106-0ubuntu0.18.04.169.0.3497.81-0ubuntu0.18.04.170.0.3538.67-0ubuntu0.18.04.170.0.3538.77-0ubuntu0.18.04.170.0.3538.110-0ubuntu0.18.04.171.0.3578.80-0ubuntu0.18.04.171.0.3578.98-0ubuntu0.18.04.172.0.3626.119-0ubuntu0.18.04.172.0.3626.121-0ubuntu0.18.04.173.0.3683.75-0ubuntu0.18.04.173.0.3683.86-0ubuntu0.18.04.174.0.3729.169-0ubuntu0.18.04.175.0.3770.90-0ubuntu0.18.04.175.0.3770.142-0ubuntu0.18.04.176.0.3809.87-0ubuntu0.18.04.176.0.3809.100-0ubuntu0.18.04.177.0.3865.90-0ubuntu0.18.04.178.0.3904.70-0ubuntu0.18.04.278.0.3904.97-0ubuntu0.18.04.178.0.3904.108-0ubuntu0.18.04.179.0.3945.79-0ubuntu0.18.04.179.0.3945.130-0ubuntu0.18.04.180.0.3987.87-0ubuntu0.18.04.180.0.3987.149-0ubuntu0.18.04.180.0.3987.163-0ubuntu0.18.04.181.0.4044.122-0ubuntu0.18.04.181.0.4044.138-0ubuntu0.18.04.183.0.4103.61-0ubuntu0.18.04.184.0.4147.105-0ubuntu0.18.04.185.0.4183.83-0ubuntu0.18.04.285.0.4183.121-0ubuntu0.18.04.186.0.4240.75-0ubuntu0.18.04.1 |
86.0.4240.198-0ubuntu0.18.04.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 3 CVEs |
before 86.0.4240.198-bp152.2.29.1 | 86.0.4240.198-bp152.2.29.1 |
chromiumSUSE:Package Hub 15 SP2 From an advisory covering 3 CVEs |
before 86.0.4240.198-bp152.2.29.1 | 86.0.4240.198-bp152.2.29.1 |
chromiumopenSUSE:Leap 15.1 From an advisory covering 3 CVEs |
before 86.0.4240.198-bp152.2.29.1 | 86.0.4240.198-bp152.2.29.1 |
chromiumopenSUSE:Leap 15.2 From an advisory covering 3 CVEs |
before 86.0.4240.198-bp152.2.29.1 | 86.0.4240.198-bp152.2.29.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 3 CVEs |
before 86.0.4240.198-bp151.3.128.1 | 86.0.4240.198-bp151.3.128.1 |
chromiumSUSE:Package Hub 15 SP1 From an advisory covering 3 CVEs |
before 86.0.4240.198-bp151.3.134.1 | 86.0.4240.198-bp151.3.134.1 |
chromiumSUSE:Package Hub 15 SP2 From an advisory covering 3 CVEs |
before 86.0.4240.198-bp152.2.35.1 | 86.0.4240.198-bp152.2.35.1 |
operaopenSUSE:Leap 15.1 NonFree From an advisory covering 2 CVEs |
before 72.0.3815.400-lp152.2.24.1 | 72.0.3815.400-lp152.2.24.1 |
operaopenSUSE:Leap 15.2 NonFree From an advisory covering 2 CVEs |
before 72.0.3815.400-lp152.2.24.1 | 72.0.3815.400-lp152.2.24.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 1081 CVEs |
before 93.0.4577.82-1.1 | 93.0.4577.82-1.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 2310 CVEs |
before 113.0.5672.92-1.1 | 113.0.5672.92-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-16013 is a high vulnerability (CVSS 8.8) in Google Chrome, published November 15, 2020. CISA lists it as known to be exploited, since November 3, 2021. EUVD reports exploitation since November 3, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.76%, the 86th percentile. Fixed in CefSharp.Common 86.0.241.
References
crbug.com/1147206
chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-16013
github.com/cefsharp/CefSharp/security/advisories/GHSA-x7fx-mcc9-27j7
nvd.nist.gov/vuln/detail/CVE-2020-16013
Show 194 moreShow less
security-tracker.debian.org/tracker/CVE-2020-16013
access.redhat.com/errata/RHSA-2020:5165
bugzilla.redhat.com/show_bug.cgi?id=1896641
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_5165.json
cve.org/CVERecord?id=CVE-2020-16013
ubuntu.com/security/CVE-2020-16013
lists.opensuse.org/archives/list/[email protected]/thread/FGRLB34GVO6HCDVG2KNYFJ6QDDAJAJQL
bugzilla.suse.com/1178630
suse.com/security/cve/CVE-2020-16013
This page doesn't list everything
Left out here: 134 versions, 2,141 references and the rest of 1 source description. The JSON record has them.