CVE-2020-16042 — Use of Uninitialized Resource in Google Chrome

CWE-908 — Use of Uninitialized ResourceCWE-200 — Sensitive Information Exposure12 documents8 sources
Severity
6.5MEDIUMNVD
EPSS
0.4%
top 39.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Google ChromeChromiumMozilla Thunderbird+6 more
Timeline
PublishedJan 8
Latest updateMay 24

Description

Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages11 packages

▶CVEListV5google/chromeunspecified — 87.0.4280.88
▶NVDgoogle/chrome< 87.0.4280.88
▶debiandebian/firefox< chromium 87.0.4280.88-0.1 (bookworm)
▶debiandebian/chromium< chromium 87.0.4280.88-0.1 (bookworm)

🔴Vulnerability Details

3
GHSA
GHSA-jcqg-j4q8-3vwg: Uninitialized Use in V8 in Google Chrome prior to 87↗2022-05-24
▶
OSV
CVE-2020-16042: Uninitialized Use in V8 in Google Chrome prior to 87↗2021-01-08
▶
OSV
firefox vulnerabilities↗2020-12-15
▶

📋Vendor Advisories

8
Ubuntu
Thunderbird vulnerabilities↗2021-01-20
▶
Ubuntu
Firefox vulnerabilities↗2020-12-15
▶
Chrome
Stable Channel Update for Desktop: CVE-2020-16040↗2020-12-02
▶
Red Hat
chromium-browser: Uninitialized Use in V8↗2020-12-02
▶
Debian
CVE-2020-16042: chromium - Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote ...↗2020
▶