Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28120
HistoryDec 06, 2020 - 3:06 a.m.

Arbitrary Code Execution

2020-12-0603:06:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
chromium
vulnerability
javascript runtime
heap corruption
pdf
remote attacker
arbitrary code execution

EPSS

0.016

Percentile

87.5%

chromium is vulnerable to arbitrary code execution. Sharing of objects over calls into JavaScript runtime in allows a remote attacker to potentially exploit heap corruption via a malicious PDF file.