CVE-2020-15994: Use after free in V8
Published Aug 17, 2020
·Updated
Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Johnathan Norman Microsoft Browser Vulnerability Research
Affected Software
4 affected componentsFixes available
All of the following
Google Chrome<86.0.4240.99
86.0.4240.99
Google Android*
Google Chrome<86.0.4240.99
Google Android
Event History
Aug 17, 2020
CVE Published
12:00 AM
Nov 3, 2020
CVE Published
via MITRE·02:21 AM
Data Sourced
via MITRE·02:21 AM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2020-15994?
CVE-2020-15994 has a high severity rating due to its potential for remote exploitation and heap corruption.
2
How do I fix CVE-2020-15994?
To fix CVE-2020-15994, update Google Chrome to version 86.0.4240.99 or higher.
3
What does CVE-2020-15994 affect?
CVE-2020-15994 affects Google Chrome versions prior to 86.0.4240.99.
4
Is CVE-2020-15994 a risk for users of Google Android?
No, CVE-2020-15994 does not affect Google Android operating systems.
5
Can CVE-2020-15994 be exploited through web pages?
Yes, CVE-2020-15994 can be exploited by attackers through crafted HTML pages.