IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
9.6Kritisch KEV

CVE-2020-15999Google Chrome FreeType Heap Buffer Overflow Vulnerability

Google Chrome Veröffentlicht: (vor 6 Jahren)

Bekannt ausgenutzt — Google Chrome FreeType Heap Buffer Overflow Vulnerability

CISA hat am 03.11.2021 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 17.11.2021.

Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2020-15999

Beschreibung

Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Schwachstellentyp (CWE): CWE-120CWE-787

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
debian debian linux 10.0
fedoraproject fedora 31
freetype freetype 2.6.0 – < 2.10.4
Google Chrome unspecified – < 86.0.4240.111
netapp ontap select deploy administration utility —
opensuse backports sle 15.0

Referenzen und Patches

CPE-Treffer (NVD) (6)
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 86.0.4240.111
  • cpe:2.3:a:freetype:freetype:*:*:*:*:*:*:*:* ≥ 2.6.0 < 2.10.4
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
  • cpe:2.3:a:opensuse:backports_sle:15.0:sp2:*:*:*:*:*:*
  • cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — Google Chrome

8.8Hoch
CVE-2026-119270
Google Chrome

Improper input validation in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119271
Google Chrome

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

4.3Mittel
CVE-2026-119272
Google Chrome

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

9.6Kritisch
CVE-2026-119263
Google Chrome

Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119264
Google Chrome

Memory corruption in Dawn in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

8.8Hoch
CVE-2026-119265
Google Chrome

Memory corruption in Quota in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)