Lucene search
Veracode Vulnerability DatabaseVERACODE:28692HistoryDec 21, 2020 - 6:51 p.m.
Remote Code Execution
2020-12-2118:51:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.221 Low
EPSS
Percentile
96.5%
chromium, sid is vulnerable to remote code execution (RCE). It is possible due to an insufficient data validation flaw found in the V8 component of the Chromium browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chromium:sid | eq | 83.0.4103.116-3.1 | |
| chromium:buster | eq | 83.0.4103.116-1~deb10u3 | |
| chromium:bullseye | eq | 83.0.4103.116-3.1 |
References
packetstormsecurity.com/files/162087/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html
packetstormsecurity.com/files/162106/Google-Chrome-86.0.4240-V8-Remote-Code-Execution.html
packetstormsecurity.com/files/162144/Google-Chrome-SimplfiedLowering-Integer-Overflow.html
chromereleases.googleblog.com/2020/12/stable-channel-update-for-desktop.html
crbug.com/1150649
security-tracker.debian.org/tracker/CVE-2020-16040
Related
packetstorm
packetstorm
Google Chrome 86.0.4240 V8 Remote Code Execution
2021-04-06 00:00:00
Google Chrome 86.0.4240 V8 Remote Code Execution
2021-04-07 00:00:00
Google Chrome SimplfiedLowering Integer Overflow
2021-04-09 00:00:00
ubuntucve
ubuntucve
CVE-2020-16040
2021-01-08 00:00:00
prion
prion
Input validation
2021-01-08 19:15:00
cve
cve
CVE-2020-16040
2021-01-08 19:15:14
debiancve
debiancve
CVE-2020-16040
2021-01-08 19:15:14
metasploit
metasploit
checkpoint_advisories
checkpoint_advisories
Google Chrome Heap Corruption (CVE-2020-16040)
2021-04-21 00:00:00
nvd
nvd
CVE-2020-16040
2021-01-08 19:15:14
cvelist
cvelist
CVE-2020-16040
2021-01-08 17:54:27
zdt
zdt
Google Chrome SimplfiedLowering Integer Overflow Exploit
2021-04-09 00:00:00
Google Chrome 86.0.4240 V8 - Remote Code Execution Exploit
2021-04-06 00:00:00
hackerone
hackerone
Valve: Steam Deck Single Click Root Remote Code Execution
2023-05-04 20:09:34
exploitdb
exploitdb
Google Chrome 86.0.4240 V8 - Remote Code Execution
2021-04-06 00:00:00
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-04-16 18:09:59
threatpost
threatpost
High-Severity Chrome Bugs Allow Browser Hacks
2020-12-04 20:40:45
Google Chrome V8 Bug Allows Remote Code-Execution
2021-04-28 17:48:16
nessus
nessus
openSUSE Security Update : opera (openSUSE-2020-2360)
2021-01-25 00:00:00
openSUSE Security Update : opera (openSUSE-2020-2359)
2021-01-25 00:00:00
Google Chrome < 87.0.4280.88 Multiple Vulnerabilities
2020-12-03 00:00:00
suse
suse
Security update for opera (important)
2020-12-29 00:00:00
Security update for opera (important)
2020-12-29 00:00:00
Security update for chromium (important)
2020-12-11 00:00:00
kaspersky
kaspersky
KLA12018 Multiple vulnerabilities in Google Chrome
2020-12-02 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: chromium-87.0.4280.88-1.fc33
2020-12-10 01:16:46
[SECURITY] Fedora 32 Update: chromium-87.0.4280.88-1.fc32
2020-12-21 01:36:08
freebsd
freebsd
chromium -- multiple vulnerabilities
2020-12-02 00:00:00
archlinux
archlinux
[ASA-202012-14] chromium: multiple issues
2020-12-09 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2020-12-02 00:00:00
openvas
openvas
Fedora: Security Advisory for chromium (FEDORA-2020-5b9c42f1b9)
2020-12-21 00:00:00
Fedora: Security Advisory for chromium (FEDORA-2020-f43efd09e8)
2020-12-10 00:00:00
Debian: Security Advisory (DSA-4824-1)
2021-01-03 00:00:00
gentoo
gentoo
Chromium, Google Chrome: Multiple vulnerabilities
2020-12-07 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-3.0-0602
2023-06-21 00:00:00
osv
osv
chromium - security update
2021-01-01 00:00:00
debian
debian
[SECURITY] [DSA 4824-1] chromium security update
2021-01-01 18:49:56
mscve
mscve
Chromium Security Updates for Microsoft Edge (Chromium-Based)
2020-01-28 08:00:00