Google Chrome FreeType Heap Buffer Overflow Vulnerability

Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function LoadSBitPng when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and...

Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits

Flaws in Google’s Chrome desktop and Android-based browsers were patched Monday in an effort to prevent known exploits from being used by attackers. Two separate security bulletins issued by Google warned that it is aware of reports that exploits for both exist in the wild. Google’s Project Zero...

New Chrome Zero-Day Under Active Attacks – Update Your Browser

Google has patched a second actively exploited zero-day flaw in the Chrome browser in two weeks, along with addressing nine other security vulnerabilities in its latest update. The company released 86.0.4240.183 for Windows, Mac, and Linux, which it said will be rolling out over the coming...

CVE-2020-16010

creationtimestamp| type| source ---|---|--- 2020-11-03 07:46:02+00:00| seen| https://t.me/cibsecurity/15799 2020-11-03 10:17:17+00:00| exploited| https://t.me/truesecator/1109 2020-11-03 16:42:14+00:00| seen| https://t.me/NeKaspersky/216 2020-11-04 13:01:05+00:00| seen|...

CVE-2020-16010

Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16010

Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16010

CVE-2020-16010 is a Google Chrome for Android UI heap buffer overflow vulnerability that allowed remote code execution and potential sandbox escape when a renderer process was compromised. Affected component: Chrome UI on Android prior to 86.0.4240.185. Root cause: heap buffer overflow in UI hand...

CVE-2020-16010

Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-16010

Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Recent assessments: kreavis-r7 at November 03, 2020 7:10pm UTC reported: Google confirm...

Chrome for Android Update

Hi, everyone! We've just released Chrome 86 86.0.4240.185 for Android: it'll become available on Google Play over the next few weeks. Security fixes in this release are listed in the corresponding Desktop Release. In addition, this Android release contains: $NA1144368 High CVE-2020-16010: Heap...