CVE-2020-16010

CRITICALCISA KEV

Google Chrome for Android UI Heap Buffer Overflow Vulnerability

Title source: CISA
STIX 2.1 vulnerability

Record summary

CVE-2020-16010 has a selected CVSS score of 9.6 (critical). CISA lists CVE-2020-16010 in KEV.

Description

Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Description source: CVE List

Exploitation context

Known exploitation

CISA KEV
Listed · Nov 3, 2021 · CISA
VulnCheck KEV
Listed · Oct 31, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

CISA SSVC decision

ExploitationActive
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated May 20, 2024 · Source: CVE List

Affected products and versions

3
ProductSourceVersion range

Chrome

Browse Google / Chrome

Default status: unknown

CVE ListBefore 86.0.4240.185affected

Chrome for Android UI

Browse Google / Chrome for Android UI
CISAVersion data not supplied

android

Browse google / android

Default status: unknown

CVE List*affected

References

4