CVE-2020-15999
Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
| Software | From | Fixed in |
|---|---|---|
| google / chrome | - | 86.0.4240.111 |
| freetype / freetype | 2.6.0 | 2.10.4 |
| debian / debian_linux | 10.0 | 10.0.x |
| fedoraproject / fedora | 31 | 31.x |
| opensuse / backports_sle | 15.0-sp2 | 15.0-sp2.x |
CefSharp.Common
|
- | 85.3.130 |
|
CefSharp.Wpf
|
- | 85.3.130 |
|
CefSharp.WinForms
|
- | 85.3.130 |
|
CefSharp.Wpf.HwndHost
|
- | 85.3.130 |
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html
- http://seclists.org/fulldisclosure/2020/Nov/33
- https://chromereleases.googleblog.com/2020/10/stable-channel-update-for-desktop_20.html
- https://crbug.com/1139963
- https://github.com/cefsharp/CefSharp/security/advisories/GHSA-pv36-h7jh-qm62
- https://googleprojectzero.blogspot.com/p/rca-cve-2020-15999.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J3QVIGAAJ4D62YEJAJJWMCCBCOQ6TVL7/
- https://security.gentoo.org/glsa/202011-12
- https://security.gentoo.org/glsa/202012-04
- https://security.gentoo.org/glsa/202401-19
- https://security.netapp.com/advisory/ntap-20240812-0001/
- https://www.debian.org/security/2021/dsa-4824
- https://www.nuget.org/packages/CefSharp.Common/
- https://www.nuget.org/packages/CefSharp.WinForms
- https://www.nuget.org/packages/CefSharp.Wpf
- https://www.nuget.org/packages/CefSharp.Wpf.HwndHost
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime