Lucene search
Veracode Vulnerability DatabaseVERACODE:28878HistoryJan 02, 2021 - 7:31 p.m.
Sandbox Restrictions Bypass
2021-01-0219:31:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
chromium
buffer overflow
sandbox escape
ui
remote attacker
html page
EPSS
0.005
Percentile
77.8%
chromium is vulnerable to sandbox restrictions bypass. A heap-based buffer overflow in UI allows a remote attacker, who has compromised the renderer process, to perform a sandbox escape via a malicious HTML page.
References
lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html
packetstormsecurity.com/files/159975/Chrome-ConvertToJavaBitmap-Heap-Buffer-Overflow.html
chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html
crbug.com/1144489
security-tracker.debian.org/tracker/CVE-2020-16011
www.debian.org/security/2021/dsa-4824
Related
redhatcve
redhatcve
CVE-2020-16011
2020-11-03 18:07:40
cve
cve
CVE-2020-16011
2020-11-03 03:15:15
ubuntucve
ubuntucve
CVE-2020-16011
2020-11-03 00:00:00
cvelist
cvelist
CVE-2020-16011
2020-11-03 02:21:48
prion
prion
Heap overflow
2020-11-03 03:15:00
nvd
nvd
CVE-2020-16011
2020-11-03 03:15:15
debiancve
debiancve
CVE-2020-16011
2020-11-03 03:15:15
suse
suse
Security update for chromium (important)
2020-11-05 00:00:00
Security update for chromium (important)
2020-11-16 00:00:00
Security update for opera (important)
2020-11-17 00:00:00
openvas
openvas
nessus
nessus
Google Chrome < 86.0.4240.183 Multiple Vulnerabilities
2020-11-02 00:00:00
Microsoft Edge (Chromium) < 86.0.622.63 Multiple Vulnerabilities
2020-11-04 00:00:00
kaspersky
kaspersky
KLA11990 Multiple vulnerabilities in Google Chrome
2020-11-02 00:00:00
KLA12014 Multiple vulnerabilities in Opera
2020-11-10 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2020-11-02 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2020-11-02 00:00:00
threatpost
threatpost
Two Chrome Browser Updates Plug Holes Actively Targeted by Exploits
2020-11-03 17:23:23
debian
debian
[SECURITY] [DSA 4824-1] chromium security update
2021-01-01 18:49:56
osv
osv
chromium - security update
2021-01-01 00:00:00
chromedriver-93.0.4577.82-1.1 on GA media
2024-06-15 00:00:00
ungoogled-chromium-113.0.5672.92-1.1 on GA media
2024-06-15 00:00:00
mscve
mscve
Chromium Security Updates for Microsoft Edge (Chromium-Based)
2020-01-28 08:00:00