https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:31:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-05627 bdu:2020-05627 https://cve.radiocsirt.org/vuln/bdu:2020-05627 https://cve.radiocsirt.org/vuln/certfr-2020-ale-023 certfr-2020-ale-023 https://cve.radiocsirt.org/vuln/certfr-2020-ale-023 https://cve.radiocsirt.org/vuln/certfr-2020-avi-732 certfr-2020-avi-732 https://cve.radiocsirt.org/vuln/certfr-2020-avi-732 https://cve.radiocsirt.org/vuln/euvd-2026-256038 EUVD-2026-256038 https://cve.radiocsirt.org/vuln/euvd-2026-256038 https://cve.radiocsirt.org/vuln/fkie_cve-2020-16017 <p>Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.</p> <p>Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-16017 https://cve.radiocsirt.org/vuln/ghsa-gvqv-779r-4jgp <p><strong>Affected:</strong> NuGet: CefSharp.Common, NuGet: CefSharp.Wpf, NuGet: CefSharp.WinForms, NuGet: CefSharp.Wpf.HwndHost</p> <p>CVE-2020-16017: Use after free in site isolation</p> <p>- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16017</p> <p>Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.</p> <p>There is currently little to no public information on the issue other than it has been flagged as `High` severity.</p> <p><strong>Affected:</strong> NuGet: CefSharp.Common, NuGet: CefSharp.Wpf, NuGet: CefSharp.WinForms, NuGet: CefSharp.Wpf.HwndHost</p> <p>CVE-2020-16017: Use after free in site isolation</p> <p>- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16017</p> <p>Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.</p> <p>There is currently little to no public information on the issue other than it has been flagged as `High` severity.</p> https://cve.radiocsirt.org/vuln/ghsa-gvqv-779r-4jgp https://cve.radiocsirt.org/vuln/gsd-2020-16017 gsd-2020-16017 https://cve.radiocsirt.org/vuln/gsd-2020-16017 https://cve.radiocsirt.org/vuln/icsa-23-264-05 <p>Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Google Chrome versions before 86.0.4240.198. If exploited, a remote threat actor could potentially perform a sandbox escape via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Animation within Google Chrome before 98.0.4758.102. This vulnerability could potentially allow a remote threat actor to exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.18. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.198. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a heap buffer overflow vulnerability in Freetype within Google Chrome before 86.0.4240.111. This vulnerability could allow a remote threat actor to potentially exploit heap corruption via a crafted HTML page.</p> <p>Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Google Chrome versions before 86.0.4240.198. If exploited, a remote threat actor could potentially perform a sandbox escape via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Animation within Google Chrome before 98.0.4758.102. This vulnerability could potentially allow a remote threat actor to exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.18. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.198. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a heap buffer overflow vulnerability in Freetype within Google Chrome before 86.0.4240.111. This vulnerability could allow a remote threat actor to potentially exploit heap corruption via a crafted HTML page.</p> https://cve.radiocsirt.org/vuln/icsa-23-264-05 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1929-1 <p>Security update for chromium</p> <p>Security update for chromium</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1929-1 https://cve.radiocsirt.org/vuln/rhsa-2020:5165 <p>chromium-browser: Inappropriate implementation in V8 chromium-browser: Inappropriate implementation in base chromium-browser: Use after free in site isolation</p> <p>chromium-browser: Inappropriate implementation in V8 chromium-browser: Inappropriate implementation in base chromium-browser: Use after free in site isolation</p> https://cve.radiocsirt.org/vuln/rhsa-2020:5165 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-16017 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: chromium-browser, Ubuntu:18.04:LTS: chromium-browser</p> <p>Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: chromium-browser, Ubuntu:18.04:LTS: chromium-browser</p> <p>Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-16017