VulnerabilitycriticalExploited in the wild

Chrome 86.0.4240.111 fixes actively exploited CVE-2020-15999 zero

Security Affairsby @securityaffairsOct 21, 2020 · 12:55 UTC (Oct 21, 2020)1 min read3 · 1 read

Read at securityaffairs.com

Analyze CVE-2020-15999 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-15999 CVE-2019-13720 CVE-2020-6418

Tags: cve-2020-15999 cve-2019-13720 cve-2020-6418 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-13720	Use-After-Free in Google Chrome WebAudio Allows Heap Corruption (Actively Exploited)	8.8	49%	KEVPoC	Nov 25, 2019 KEV May 23, 2022
CVE-2020-15999	Heap Buffer Overflow in FreeType Font Rendering in Google Chrome (CVE-2020-15999)	9.6	64%	KEVPoC ×2	Nov 3, 2020 KEV Nov 3, 2021
CVE-2020-6418	Type Confusion in Google Chrome's V8 Engine Enables Heap Corruption	8.8	79%	KEVPoC ×2	Feb 27, 2020 KEV Nov 3, 2021

From the original article

1 min read at securityaffairs.com

Google has released Chrome version 86. 0. 4240.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.