Exposures › CVE-2020-16010
CVE-2020-16010
Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2021-11-03
Reference
⌖ exploited in the wild
shame 50/100
exploited-in-wild
Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
▸ Recommended action Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Players implicated
Description
Google Chrome for Android UI contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.
Affected FedRAMP products 2 in the catalog
| Product | Provider | Status | Match |
|---|---|---|---|
| Google Services (Google Cloud Platform Products and underlying Infrastructure) | Authorized | vendor-exact · 0.90 | |
| Google Workspace | Authorized | vendor-exact · 0.90 |