Exposures › CVE-2020-16017

CVE-2020-16017

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2021-11-03

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-16017

⌖ exploited in the wild shame 50/100 exploited-in-wild

Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.

Players implicated

Google · vendor chrome · product

Description

Google Chrome contains a use-after-free vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.

Affected FedRAMP products 2 in the catalog

Product	Provider	Status	Match
Google Services (Google Cloud Platform Products and underlying Infrastructure)	Google	Authorized	vendor-exact · 0.90
Google Workspace	Google	Authorized	vendor-exact · 0.90