Google fixes another Chrome zero-day exploited in the wild
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-6418 | Type Confusion in Google Chrome's V8 Engine Enables Heap Corruption | 8.8 | 79% | KEVPoC ×2 | KEV |
From the original article
2 min read at helpnetsecurity.com
For the third time in a year, Google has fixed a Chrome zero-day (CVE-2020-6418) that is being actively exploited by attackers in the wild. No details have been shared about the attacks and about the flaw itself, apart from the short description that says it’s a type confusion flaw in V8 , the JavaScript engine used by the Chrome browser.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.