Two New Chrome 0-Days Under Active Attacks
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-16009 | Type Confusion in Google Chromium V8 Engine Enables RCE via Crafted HTML Pages | 8.8 | 48% | KEVPoC ×2 | KEV |
| CVE-2020-16013 | Heap Corruption in Google Chrome V8 Engine (CVE-2020-16013) Under Active Attack | 8.8 | 3% | KEV | KEV |
| CVE-2020-16017 | Use-After-Free Sandbox Escape in Google Chrome | 9.6 | 3% | KEV | KEV |
From the original article
1 min read at thehackernews.com
Google has patched two more zero-day flaws in the Chrome web browser for desktop, making it the fourth and fifth actively exploited vulnerabilities addressed by the search giant in recent weeks. The company released 86. 0.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.