CVE-2020-16009

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score33.8920%

EPSS Percentile90.66th

Published2020-11-03

Last Modified2025-10-24

Data SourcesNVDCISA KEVFIRST.org EPSS

Vulnerability Description

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected Platforms (CPE)

📦

Cefsharp

< 86.0.241

📦

Google

Chrome

< 86.0.4240.183

📦

Microsoft

Edge

< 86.0.622.63

📦

Microsoft

Edge Chromium

< 86.0.4240.183

References & Advisories

🔗 http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00016.html

🔗 http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00017.html

🔗 http://packetstormsecurity.com/files/159974/Chrome-V8-Turbofan-Type-Confusion.html

🔗 https://chromereleases.googleblog.com/2020/11/stable-channel-update-for-desktop.html

🔗 https://crbug.com/1143772

🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S4XYJ7B6OXHZNYSA5J3DBUOFEC6WCAGW/

🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SC3U3H6AISVZB5PLZLLNF4HMQ4UFFL7M/

🔗 https://security.gentoo.org/glsa/202011-12

CVE-2020-16009

Vulnerability Description

Affected Platforms (CPE)

Cefsharp

Chrome

Edge

Edge Chromium

References & Advisories

Related Security Intelligence Articles

Daily Global Cyber Threat Intelligence Digest — July 30, 2026

Daily Global Cyber Threat Intelligence Digest — July 24, 2026

Related Vulnerabilities