CVE-2020-16040

MEDIUM 6.5CVE-2020-16040 · Published 08/01/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
chrome google	`< 87.0.4280.88`	`87.0.4280.88`

Description

Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

packetstormsecurity.com/files/162087/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html · Broken Link
packetstormsecurity.com/files/162106/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html · Exploit
packetstormsecurity.com/files/162144/Google-Chrome-SimplfiedLowering-Integer-Overflow.html · Exploit
chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html · Release Notes
crbug.com/1150649 · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free