CVE-2020-16006

Chromium vulnerability CVE-2020-16006 concerns an inappropriate implementation in V8 prior to version 86.0.4240.183, enabling a remote attacker to potentially trigger heap corruption via a crafted HTML page. Affected software is the Chromium browser (V8 engine component). Impact is remote code ex...

CVE-2020-16006

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-15995

CVE-2020-15995 is a vulnerability in Chromium/Google Chrome’s V8 engine, where an out-of-bounds write in V8 prior to 87.0.4280.141 could enable a remote attacker to potentially achieve heap corruption via a crafted HTML page. The issue was fixed by upgrading to Chromium version 87.0.4280.141 (or ...

CVE-2020-15995

Out of bounds write in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-15994

Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-15994

CVE-2020-15994 affects Google Chrome’s V8 engine, with heap corruption possible through a remote attacker via a crafted HTML page in versions prior to 86.0.4240.99. The vulnerability is described as a use-after-free in V8. The Chrome 86.0.4240.99 Android update notes this release includes multipl...

CVE-2020-15979

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-15979

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-15979

CVE-2020-15979 affects Chromium/Google Chrome’s V8 engine prior to 86.0.4240.75. The Arch Linux ASA-202010-1 describes it as an appropriate implementation security issue in V8, labeled as an access restriction bypass. The Debian/DSA and Debian tracker entries also reference the CVE in the Chromi...

CVE-2020-16009

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recent assessments: kreavis-r7 at November 03, 2020 7:12pm UTC reported: Google confirmed reports that an exploit for CVE-2020-16009...

Google Chrome V8 Misimplementation Vulnerability (CNVD-2020-60470)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A V8 mal-implementation vulnerability exists in versions prior to Google Chrome 86.0.4240.183. A remote attacker can exploit this vulnerability to cause heap damage...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1138911 High CVE-2020-16004: Use after free in user interface. Reported by Leecraso and Guang Gong of 360 Alpha Lab working with 360 BugCloud on 2020-10-15 1139398 High CVE-2020-16005: Insufficient policy enforcement in...

VulnCheck KEV: CVE-2020-16009

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2020:1715-1 Rating: critical References: 1177408 Cross-References: CVE-2020-15967 CVE-2020-15968 CVE-2020-15969 CVE-2020-15970 CVE-2020-15971 CVE-2020-15972 CVE-2020-15973 CVE-2020-15974 CVE-2020-15975...

USN-4592-1: Linux kernel vulnerabilities

Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2020-12351 Andy Nguyen discovered that the...

Chrome for Android Update

Hi, everyone! We've just released Chrome 86 86.0.4240.99 for Android: it'll become available on Google Play over the next few weeks. This release includes Security, stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let u...

chromium-browser: Out of bounds write in V8

Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

CVE-2020-15979

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

@capacitor-community/electron-core (>=0.0.2, <=1.0.1), @felixrieseberg/electron-prebuilt-compile (>=9.0.0-beta.1, <=9.2.1) +16 more potentially affected by CVE-2020-15174 via electron (>=9.0.0, <=9.2.1)

electron NPM version =9.0.0, =0.0.2, =9.0.0-beta.1, =5.0.0-1, =0.8.2, =0.1.1, =0.3.218, =0.2.9, =3.0.7, =9.0.0, =1.1.52, =3.2.13, =3.1.0, =3.1.10 and more Source cves: CVE-2020-15174 Source advisory: OSV:GHSA-2Q4G-W47C-4674...

CVE-2020-26535

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. If TslAlloc attempts to allocate thread local storage but obtains an unacceptable index value, V8 throws an exception that leads to a write access violation and read access violation...