CVE-2020-16011
Summary
| CVE | CVE-2020-16011 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-11-03 03:15:00 UTC |
|---|
| Updated | 2021-03-11 18:14:00 UTC |
|---|
| Description | Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| 1144489 -
chromium -
An open-source project to help move the web forward. -
Monorail |
MISC |
crbug.com |
Permissions Required, Third Party Advisory |
| [security-announce] openSUSE-SU-2020:1829-1: important: Security update |
SUSE |
lists.opensuse.org |
Mailing List, Third Party Advisory |
| [security-announce] openSUSE-SU-2020:1831-1: important: Security update |
SUSE |
lists.opensuse.org |
Mailing List, Third Party Advisory |
| Chrome ConvertToJavaBitmap Heap Buffer Overflow ≈ Packet Storm |
MISC |
packetstormsecurity.com |
Third Party Advisory, VDB Entry |
| Debian -- Security Information -- DSA-4824-1 chromium |
DEBIAN |
www.debian.org |
Third Party Advisory |
| Chrome Releases: Stable Channel Update for Desktop |
MISC |
chromereleases.googleblog.com |
Release Notes, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 690373 Free Berkeley Software Distribution (FreeBSD) Security Update for chromium (3ec6ab59-1e0c-11eb-a428-3065ec8fd3ec)
- 750593 OpenSUSE Security Update for opera (openSUSE-SU-2020:1952-1)
