GitHub Advisoryadvisory · NuGet

GHSA-x7fx-mcc9-27j7 Inappropriate implementation in V8 in CefSharp

HIGH Published 2020-11-27 Modified 2020-11-27 Official page ↗
Aliases
CVE-2020-16013
Ecosystem
NuGet
Packages
CefSharp.Common, CefSharp.Wpf, CefSharp.WinForms, CefSharp.Wpf.HwndHost
Severity
High
Weaknesses
CWE-119, CWE-787
Reviewed
2020-11-27

Affected packages

• NuGet CefSharp.Common: < 86.0.241 → fixed in 86.0.241 • NuGet CefSharp.Wpf: < 86.0.241 → fixed in 86.0.241 • NuGet CefSharp.WinForms: < 86.0.241 → fixed in 86.0.241 • NuGet CefSharp.Wpf.HwndHost: < 86.0.241 → fixed in 86.0.241

Description

High CVE-2020-16013: Inappropriate implementation in V8. • https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16013 Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild. There is currently little to no public information on the issue other than it has been flagged as `High` severity.

Related

Alias · CVE (1)

  • CVE-2020-16013 Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.198 allowed a remote attacker to potentially exploit heap corruption… vulnerability

Weakness · CWE (2)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
  • CWE-787 Out-of-bounds Write weakness

References