Inappropriate implementation in V8 in CefSharp

HIGH 8.8EXPLOITED (CISA KEV)CVE-2020-16013 · GHSA-x7fx-mcc9-27j7 · Published 08/01/2021 · updated 17/06/2026

Google Chromium V8 Incorrect Implementation Vulnerabililty. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
CefSharp.Common NuGet	`< 86.0.241`	`86.0.241`
CefSharp.WinForms NuGet	`< 86.0.241`	`86.0.241`
CefSharp.Wpf NuGet	`< 86.0.241`	`86.0.241`
CefSharp.Wpf.HwndHost NuGet	`< 86.0.241`	`86.0.241`
chrome google	`< 86.0.4240.198`	`86.0.4240.198`

Description

High CVE-2020-16013: Inappropriate implementation in V8.

Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.

There is currently little to no public information on the issue other than it has been flagged as High severity.

NVD description

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

cefsharp/CefSharp security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2020-16013 · ADVISORY
chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html · WEB
crbug.com/1147206 · WEB
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2020-16013

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free