CVE-2020-6384

HIGH 8.8CVE-2020-6384 · Published 27/02/2020 · updated 17/06/2026

In short

CVE-2020-6384 is a HIGH (CVSS 8.8) vulnerability affecting chrome (google).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 77.0% of all vulnerabilities.
Fix: update to 80.0.3987.116 or later.

Package	Affected versions	Patched versions
chrome google	`< 80.0.3987.116`	`80.0.3987.116`

Description

Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

References

access.redhat.com/errata/RHSA-2020:0738 · Third Party Advisory
chromereleases.googleblog.com/2020/02/stable-channel-update-for-desktop_18.html · Release Notes
crbug.com/1048473 · Exploit
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6IOHSO6BUKC6I66J5PZOMAGFVJ66ZS57
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3B5RWJQD5LA45MYLLR55KZJOJ5NVZGP
debian.org/security/2020/dsa-4638 · Third Party Advisory

More vulnerabilities in chrome

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

chrome

google

< 80.0.3987.116

80.0.3987.116

More vulnerabilities in chrome

See all →