Google Chromium V8 Type Confusion Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| CefSharp.Common | < 86.0.241 | 86.0.241 |
| CefSharp.WinForms | < 86.0.241 | 86.0.241 |
| CefSharp.Wpf | < 86.0.241 | 86.0.241 |
| CefSharp.Wpf.HwndHost | < 86.0.241 | 86.0.241 |
| cefsharp | < 86.0.241 | 86.0.241 |
| chrome | < 86.0.4240.183 | 86.0.4240.183 |
| edge | < 86.0.622.63 | 86.0.622.63 |
| edge chromium | < 86.0.4240.183 | 86.0.4240.183 |
| backports sle | = 15.0 |
CVE-2020-16009: Inappropriate implementation in V8
Google is aware of reports that exploits for CVE-2020-16009 exist in the wild.
Allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
There is currently little to no public information on the issue other than it has been flagged as High severity.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free