GHSA-x7fx-mcc9-27j7
Inappropriate implementation in V8 in CefSharp
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | CefSharp.Common | < 86.0.241 | 86.0.241 |
| NuGet | CefSharp.Wpf | < 86.0.241 | 86.0.241 |
| NuGet | CefSharp.WinForms | < 86.0.241 | 86.0.241 |
| NuGet | CefSharp.Wpf.HwndHost | < 86.0.241 | 86.0.241 |
Details
As written in the advisory (Markdown source, shown as plain text).
High CVE-2020-16013: Inappropriate implementation in V8.
- https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop_11.html
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16013
Google is aware of reports that exploits for CVE-2020-16013 and CVE-2020-16017 exist in the wild.
There is currently little to no public information on the issue other than it has been flagged as `High` severity.
References
External links from the advisory. They lead to third-party sites.