Skip to content

Use after free in CefSharp

High severity GitHub Reviewed Published Nov 27, 2020 in cefsharp/CefSharp • Updated Feb 1, 2023

Package

nuget CefSharp.Common (NuGet)

Affected versions

< 86.0.241

Patched versions

86.0.241
nuget CefSharp.WinForms (NuGet)
< 86.0.241
86.0.241
nuget CefSharp.Wpf (NuGet)
< 86.0.241
86.0.241
nuget CefSharp.Wpf.HwndHost (NuGet)
< 86.0.241
86.0.241

Description

CVE-2020-16017: Use after free in site isolation

Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.

There is currently little to no public information on the issue other than it has been flagged as High severity.

References

@amaitland amaitland published to cefsharp/CefSharp Nov 27, 2020
Reviewed Nov 27, 2020
Published to the GitHub Advisory Database Nov 27, 2020
Published by the National Vulnerability Database Jan 8, 2021
Last updated Feb 1, 2023

Severity

High

EPSS score

0.229%
(62nd percentile)

Weaknesses

CVE ID

CVE-2020-16017

GHSA ID

GHSA-gvqv-779r-4jgp

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.