CVE-2020-15965

—

CVSS 3.1

8.8 high

EPSS

3%p86

Published

Sep 21, 2020 (Sep 21, 2020)

Modified

Jun 17, 2026

Description

Type confusion in V8 in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Vendors: google opensuse debian fedoraproject
Products: chrome, backports sle, debian linux, fedora, leap
Weakness: CWE-843
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.9%)

In the news1 stories

Google addresses a high severity flaw in V8 engine in Chrome

Security AffairsApr 28, 13:46 UTC · Apr 28, 2021Exploit / PoC CVE-2021-21227 CVE-2020-16040 CVE-2020-15965+6 CVEs