CVE-2020-6572

A use-after-free vulnerability in Google Chrome's media component allowed remote code execution via a crafted HTML page and was actively exploited in the wild.

This use-after-free flaw in Chrome's media stack enabled attackers to execute arbitrary code remotely by tricking users into visiting a malicious webpage. DIB organizations must ensure their browsers are patched immediately, as this vulnerability was actively exploited in the wild and represents a significant compliance risk under NIST 800-171 for unpatched software.

Shame score — The vulnerability was actively exploited in the wild, indicating a failure to patch known critical flaws before they were weaponized by attackers.