NVD disclosure day

Published threat advisories for January 8, 2021

CVE advisoryKnown Exploit

CVE-2020-16017

Google Chrome Sandbox Escape Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A use-after-free vulnerability in Google Chrome could allow attackers to escape the browser's sandbox. This could impact organizations by enabling unauthorized access to systems and data through a compromised renderer process and a crafted HTML page. The business risk includes potential data breaches and operational di

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2020-16013

Google Chrome Heap Corruption Risk

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A vulnerability in Google Chrome's V8 engine could allow a remote attacker to corrupt system memory via a crafted HTML page. This may lead to system compromise, impacting organizational data and operations. The risk is heightened due to its potential for widespread exploitation.

NVD published: • CISA KEV