GitHub Advisoryadvisory · NuGet
GHSA-gvqv-779r-4jgp Use after free in CefSharp
HIGH
Official page ↗
- Aliases
- CVE-2020-16017
- Ecosystem
- NuGet
- Packages
- CefSharp.Common, CefSharp.Wpf, CefSharp.WinForms, CefSharp.Wpf.HwndHost
- Severity
- High
- Weaknesses
- CWE-416
- Reviewed
- 2020-11-27
Affected packages
• NuGet CefSharp.Common: < 86.0.241 → fixed in 86.0.241
• NuGet CefSharp.Wpf: < 86.0.241 → fixed in 86.0.241
• NuGet CefSharp.WinForms: < 86.0.241 → fixed in 86.0.241
• NuGet CefSharp.Wpf.HwndHost: < 86.0.241 → fixed in 86.0.241
Description
CVE-2020-16017: Use after free in site isolation
• https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16017
Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.
There is currently little to no public information on the issue other than it has been flagged as `High` severity.
Related
Alias · CVE (1)
- CVE-2020-16017 Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process… vulnerability
Weakness · CWE (1)
- CWE-416 Use After Free weakness