CVE-2020-6572
High · 8.8 CISA KEVCVSS
8.8
EPSS
10.6%
Published
Jan 14, 2021
CISA due date
Jul 10, 2022
The record
Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | chromium | 0 | 81.0.4044.92-1 |
| Debian:12 | chromium | 0 | 81.0.4044.92-1 |
| Debian:13 | chromium | 0 | 81.0.4044.92-1 |
| Debian:14 | chromium | 0 | 81.0.4044.92-1 |
| Ubuntu:16.04:LTS | chromium-browser | 0 | 89.0.4389.82-0ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | chromium-browser | 0 | 89.0.4389.82-0ubuntu0.18.04.1 |
Related vulnerabilities
- CVE-2025-6558 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to… Also affects chromium
- CVE-2025-7656 Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker… Also affects chromium
- CVE-2025-6554 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to… Also affects chromium
- CVE-2025-6191 Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker… Also affects chromium
- CVE-2025-5959 Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker… Also affects chromium
- CVE-2025-5419 Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a… Also affects chromium
- CVE-2022-2160 Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to… Also affects chromium
- CVE-2022-0303 security update Also affects chromium