CVE-2020-16017
CRITICAL KEVGoogle Chrome < 86.0.4240.198 - Use After Free
Title source: ruleDescription
Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
References (3)
Scores
CVSS v3
9.6
EPSS
0.2142
EPSS Percentile
95.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Exploitation Intel
CISA KEV
2021-11-03
VulnCheck KEV
2020-11-07
InTheWild.io
2020-11-07
ENISA EUVD
EUVD-2020-1456
Classification
CWE
CWE-416
Status
published
Affected Products (5)
google/chrome
< 86.0.4240.198
nuget/CefSharp.Common
< 86.0.241NuGet
nuget/CefSharp.Wpf
< 86.0.241NuGet
nuget/CefSharp.WinForms
< 86.0.241NuGet
nuget/CefSharp.Wpf.HwndHost
< 86.0.241NuGet
Timeline
Published
Jan 08, 2021
KEV Added
Nov 03, 2021
Tracked Since
Feb 18, 2026