Skip to content

Inappropriate implementation in V8 in CefSharp

High severity GitHub Reviewed Published Nov 27, 2020 in cefsharp/CefSharp • Updated Feb 1, 2023

Package

nuget CefSharp.Common (NuGet)

Affected versions

< 86.0.241

Patched versions

86.0.241
nuget CefSharp.WinForms (NuGet)
< 86.0.241
86.0.241
nuget CefSharp.Wpf (NuGet)
< 86.0.241
86.0.241
nuget CefSharp.Wpf.HwndHost (NuGet)
< 86.0.241
86.0.241

Description

High CVE-2020-16013: Inappropriate implementation in V8.

Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.

There is currently little to no public information on the issue other than it has been flagged as High severity.

References

@amaitland amaitland published to cefsharp/CefSharp Nov 27, 2020
Reviewed Nov 27, 2020
Published to the GitHub Advisory Database Nov 27, 2020
Published by the National Vulnerability Database Jan 8, 2021
Last updated Feb 1, 2023

Severity

High

EPSS score

0.374%
(74th percentile)

Weaknesses

CVE ID

CVE-2020-16013

GHSA ID

GHSA-x7fx-mcc9-27j7

Source code

No known source code
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.