GHSA-gvqv-779r-4jgpHigh

Use after free in CefSharp

Published
November 27, 2020
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-16017 →

📋 Description

CVE-2020-16017: Use after free in site isolation

  • https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16017

Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.

There is currently little to no public information on the issue other than it has been flagged as High severity.

🎯 Affected products4

  • nuget/CefSharp.Common:< 86.0.241
  • nuget/CefSharp.Wpf:< 86.0.241
  • nuget/CefSharp.WinForms:< 86.0.241
  • nuget/CefSharp.Wpf.HwndHost:< 86.0.241

🔗 References (5)